<!DOCTYPE html> <head> <script> function foo() { return "aaa"; } </script> </head> <body> <img src="javascript: foo()"> <script>parent.passJSUrl4 = true</script> </body>
