security.dataURI

data: URIs do not count as different-origin, and do not taint the canvas

Spec references:

Actual output:

FAIL (fallback content)

Expected output: