Opener frame PASS: Cross frame access to a data: URL embed in a frame on a foreign domain denied! -------- Frame: '-->' -------- PASS: Cross frame access from a frame on a foreign domain denied! Inner iframe. This iframe (which is data: URL and whose parent is on a foreign domain) is the frame that the main frame is trying to access. It should not have access to it.