http://127.0.0.1:8000/security/XFrameOptions/resources/x-frame-options-multiple-headers-sameorigin.cgi - willSendRequest redirectResponse (null) http://127.0.0.1:8000/security/XFrameOptions/x-frame-options-multiple-headers-sameorigin-allow.html - didFinishLoading http://127.0.0.1:8000/security/XFrameOptions/resources/x-frame-options-multiple-headers-sameorigin.cgi - didReceiveResponse The frame below should load, proving that 'sameorigin, sameorigin' === 'sameorigin'. -------- Frame: '-->' -------- This page should load iff it's same origin with it's parent.