<!DOCTYPE html>
<html>
<head>
<script>
if (window.testRunner)
  testRunner.dumpAsText();
</script>
<meta http-equiv="Content-Security-Policy" content="object-src 'none'">
</head>
<body>
This test passes if there is a console message saying the plugin was blocked.
<object type="application/x-webkit-test-netscape"></object>
</body>
</html>