[multiple.sub.html]
  [`XFO: SAMEORIGIN; XFO: DENY` blocks same-origin framing.]
    expected: FAIL

  [`XFO: DENY; XFO: SAMEORIGIN` blocks same-origin framing.]
    expected: FAIL

  [`XFO: INVALID; XFO: SAMEORIGIN` blocks same-origin framing.]
    expected: FAIL

  [`XFO: SAMEORIGIN; XFO: INVALID` blocks same-origin framing.]
    expected: FAIL

  [`XFO: SAMEORIGIN; XFO: SAMEORIGIN` blocks cross-origin framing.]
    expected: FAIL