diff --git a/resource-timing/entries-for-object-frame-options-deny.html b/resource-timing/entries-for-object-frame-options-deny.html
new file mode 100644
index 00000000000000..a69b642971ba6a
--- /dev/null
+++ b/resource-timing/entries-for-object-frame-options-deny.html
@@ -0,0 +1,35 @@
+<!DOCTYPE HTML>
+<html>
+<head>
+<meta charset="utf-8" />
+<meta name="timeout" content="long">
+<link rel="author" title="Noam Rosenthal" href="noam@chromium.org">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script src="/common/get-host-info.sub.js"></script>
+<script src="resources/entry-invariants.js"></script>
+</head>
+<body>
+<script>
+const {REMOTE_ORIGIN} = get_host_info();
+
+promise_test(async t => {
+  const success_url = new URL("/resource-timing/resources/object-frame-options-200.asis", REMOTE_ORIGIN).href;
+  const fail_url = new URL("/resource-timing/resources/object-frame-options-403.asis", REMOTE_ORIGIN).href;
+  const load_object = async url => {
+    const object = document.createElement("object");
+    object.data = url;
+    document.body.appendChild(object);
+    t.add_cleanup(() => object.remove());
+    await new Promise(resolve => {
+      object.onload = object.onerror = resolve;
+    });
+  };
+
+  await Promise.all([success_url, fail_url].map(load_object));
+  assert_equals(performance.getEntriesByName(success_url).length, 1);
+  assert_equals(performance.getEntriesByName(fail_url).length, 1);
+}, "Test that object elements with X-Frame-Options: Deny produce resource timing entries");
+</script>
+</body>
+</html>
diff --git a/resource-timing/iframe-sequence-of-events.html b/resource-timing/iframe-sequence-of-events.html
index 02d1c362c9df49..5d719fb9153f18 100644
--- a/resource-timing/iframe-sequence-of-events.html
+++ b/resource-timing/iframe-sequence-of-events.html
@@ -3,6 +3,7 @@
 <title>Test the sequence of events when reporting iframe timing.</title>
 <script src="/resources/testharness.js"></script>
 <script src="/resources/testharnessreport.js"></script>
+<script src="resources/entry-invariants.js"></script>
 <script src="resources/frame-timing.js"></script>
 <script src="/common/utils.js"></script>
 <script src="/common/get-host-info.sub.js"></script>
diff --git a/resource-timing/resources/frame-timing.js b/resource-timing/resources/frame-timing.js
index 019bd424b55065..65710e22c8fc39 100644
--- a/resource-timing/resources/frame-timing.js
+++ b/resource-timing/resources/frame-timing.js
@@ -25,8 +25,8 @@ function test_frame_timing_before_load_event(type) {
 
 
 function test_frame_timing_change_src(type,
-                                      origin1 = document.origin,
-                                      origin2 = document.origin,
+                                      origin1 = location.origin,
+                                      origin2 = location.origin,
                                       tao = false, label = '') {
   const uid = token();
   promise_test(async t => {
@@ -59,5 +59,11 @@ function test_frame_timing_change_src(type,
 
     const entries = performance.getEntries().filter(e => e.name.includes(uid));
     assert_equals(entries.length, 2);
+    for (const entry of entries) {
+      if (tao || entry.name.startsWith(location.origin))
+        invariants.assert_tao_pass_no_redirect_http(entry);
+      else
+        invariants.assert_tao_failure_resource(entry);
+    }
   }, label || `A ${type} should report separate RT entries if its src changed from the outside`);
 }
diff --git a/resource-timing/resources/object-frame-options-200.asis b/resource-timing/resources/object-frame-options-200.asis
new file mode 100644
index 00000000000000..122445326bdef6
--- /dev/null
+++ b/resource-timing/resources/object-frame-options-200.asis
@@ -0,0 +1,6 @@
+HTTP/1.0 200 OK
+Content-Type: text/html
+X-Frame-Options: DENY
+Content-Security-Policy: frame-ancestors 'none'
+
+Hello
diff --git a/resource-timing/resources/object-frame-options-403.asis b/resource-timing/resources/object-frame-options-403.asis
new file mode 100644
index 00000000000000..fd64f0bcdbb7c1
--- /dev/null
+++ b/resource-timing/resources/object-frame-options-403.asis
@@ -0,0 +1,6 @@
+HTTP/1.0 403 OK
+Content-Type: text/html
+X-Frame-Options: DENY
+Content-Security-Policy: frame-ancestors 'none'
+
+Hello
