<html>
<body>
<H1>Evil IFrame</H1>
<div id="evilDiv">
This frame is loaded over insecure HTTPS.
</div>
<script>
if(window.location.search.indexOf("open_popup") != -1) {
  // Popup name must be empty so that this always opens a new popup window.
  window.open("about:blank", "", "toolbar=0");
}
</script>
</body>
</html>