blob: 152d3791e1907bcf2ce33f03c23c9287fb97990d [file] [log] [blame]
<!DOCTYPE html>
<html>
<body>
<script src='../resources/reflected-xss-and-xss-protection.js'></script>
<script>testMixedHeader('invalid', 'allow');</script>
</body>
</html>