blob: ed6c193c306a210a8e32957bf3ac87f47ec5a274 [file] [log] [blame]
<!DOCTYPE html>
<html>
<body>
<script src='../resources/reflected-xss-and-xss-protection.js'></script>
<script>testMixedHeader('allow', 'invalid');</script>
</body>
</html>