<!DOCTYPE HTML>
<html>
<body>
object should be blocked <br/>
<object data="http://example.com/browser/dom/security/test/general/file_framing_xfo_embed_object.sjs"></object>
</body>
</html>