third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/1.1/reflected-xss-and-xss-protection-unset-allow.html - chromium/src - Git at Google

 <!DOCTYPE html>
 <html>
 <body>
     <script src='../resources/reflected-xss-and-xss-protection.js'></script>
     <script>testMixedHeader('unset', 'allow');</script>
 </body>
 </html>
	<!DOCTYPE html>
	<html>
	<body>
	<script src='../resources/reflected-xss-and-xss-protection.js'></script>
	<script>testMixedHeader('unset', 'allow');</script>
	</body>
	</html>