CONSOLE MESSAGE: Refused to load http://localhost:8000/security/resources/abe.png because it appears in neither the object-src directive nor the default-src directive of the Content Security Policy.
ALERT: PASS
This test passes if it doesn't alert FAIL and does alert PASS.