Test we allow web assembly with unsafe-eval after calling window.open.