http/tests/security/contentSecurityPolicy/resources/sandbox.php - external/WebKit_LayoutTests - Git at Google

 <?php
 header("X-WebKit-CSP: sandbox " . $_GET["sandbox"]);
 ?>
 <!DOCTYPE html>
 <p>Ready</p>
 <script>
 alert("Script executed in iframe.");
 window.secret = "I am a secret";
 </script>
	<?php
	header("X-WebKit-CSP: sandbox " . $_GET["sandbox"]);
	?>
	<!DOCTYPE html>
	<p>Ready</p>
	<script>
	alert("Script executed in iframe.");
	window.secret = "I am a secret";
	</script>