An agent that preserves measured iframe handoffs needs the declared target respo...

{ "body": { "url": "https://example.com/" }, "bodyType": "json", "method": "POST", "type": "http" }

{ "example": { "billable": true, "findings": [ { "confidence": 85, "evidence": [ { "page_indices": [], "page_url": null, "pattern": "frame-response-ancestor-compatibility_scoped_evidence", "type": "raw_html" } ], "id": "frame-response-ancestor-compatibility", "limits": [ "Only complete documents and already present standards/robots from the unchanged original RAM measurement are used; no new requests, rendering, login or submission.", "Only numeric counts and booleans are returned. Names, IDs, selectors, URLs, contacts, persons, addresses and raw HTML/header/robots values stay private.", "Only the direct parent and already measured iframe response are compared. Enforcing response frame-ancestors directives supersede XFO; all enforced policies must allow the serialized direct-parent origin. Other ancestor contexts and actual embedding are not inferred. Any unmeasured HTTP(S) iframe target makes this defined relation unknown." ], "module": "frame-response-ancestor-compatibility", "module_cpu_ms": 0, "state": "observed", "value": { "csp_authorized_comparisons": 1, "csp_superseded_xfo_edges": 0, "declared_excluded_edges": 1, "measured_direct_parent_edges": 1, "xfo_comparisons": 0 }, "warnings": [] } ], "known_count": 1, "scope": { "at": "2026-10-14T00:00:00.000Z", "contact_values_returned": false, "pages": 2, "rendered": false, "requests": 0 }, "warnings": [] }, "type": "json" }