This tests that setting a base URL to a data URL is denied and hence there is no script execution.