content-security-policy/support/postmessage-pass.html

<script>
    window.parent.postMessage('PASS', '*');

</script>