CONSOLE MESSAGE: Refused to load http://127.0.0.1:8000/plugins/resources/mock-plugin.pl because it does not appear in the object-src directive of the Content Security Policy.
This test ensures that objects inside SVG foreignobject elements are beholden to the same policy as the rest of the document. This test passes if there is a console message saying the plugin was blocked.