javascript: uris should not run with policy "script-src 'self'".
Click here. If you see a popup, the test has failed.