Derived from domita_test_untrusted.html as of r4471

click me. Function calls in attributes should work.

click me

click me

Timeouts and Intervals

do not click yet

click me

click me

Onload

DOMContentLoaded

XHR instance props
XHR to disallowed URL
XHR sync
XHR async