The iframe below loads /fetch?name=robots.txt, which returns a
text/plain response with no Content-Disposition header
— exactly as a real robots.txt would be served.
Expected bug: Tungsten classifies the iframe response as a download
and frame-busts, navigating the top-level page to the robots.txt URL.