<!DOCTYPE HTML>
<html>
<body>
embed should be blocked <br/>
<embed src="http://example.com/browser/dom/security/test/general/file_framing_xfo_embed_object.sjs"></embed>
</body>
</html>