diff --git a/testing/web-platform/meta/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-failure.sub.html.ini b/testing/web-platform/meta/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-failure.sub.html.ini
new file mode 100644
index 000000000000..62dfd0092b60
--- /dev/null
+++ b/testing/web-platform/meta/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-failure.sub.html.ini
@@ -0,0 +1,6 @@
+[javascript-url-security-check-failure.sub.html]
+  [cross-origin-domain but same-origin, setting src]
+    expected: FAIL
+
+  [cross-origin-domain but same-origin, setting location.href]
+    expected: FAIL
diff --git a/testing/web-platform/meta/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-multi-globals.sub.html.ini b/testing/web-platform/meta/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-multi-globals.sub.html.ini
new file mode 100644
index 000000000000..b45cae867d0e
--- /dev/null
+++ b/testing/web-platform/meta/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-multi-globals.sub.html.ini
@@ -0,0 +1,3 @@
+[javascript-url-security-check-multi-globals.sub.html]
+  [Using iframeEl.src]
+    expected: FAIL
diff --git a/testing/web-platform/meta/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-same-origin-domain.sub.html.ini b/testing/web-platform/meta/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-same-origin-domain.sub.html.ini
new file mode 100644
index 000000000000..2701c1818a5b
--- /dev/null
+++ b/testing/web-platform/meta/html/browsers/browsing-the-web/navigating-across-documents/javascript-url-security-check-same-origin-domain.sub.html.ini
@@ -0,0 +1,4 @@
+[javascript-url-security-check-same-origin-domain.sub.html]
+  expected: TIMEOUT
+  [javascript: URL security check for same-origin-domain but not same-origin]
+    expected: TIMEOUT