<!DOCTYPE HTML> <html> <head> <meta charset="utf-8"> <title>Toplevel data navigation</title> </head> <body> test3: performing data: URI navigation through win.loc.href<br/> <script> window.location.href = "data:text/html,<body>toplevel data: URI navigations should be blocked</body>"; </script> </body> </html>