CONSOLE MESSAGE: line 1: Refused to execute JavaScript URL because of Content-Security-Policy. This test passes if it doesn't alert fail.