gecko-dev/dom/security/test/sri/iframe_require-sri-for_no_csp.html

<script>
  w = new Worker("rsf_csp_worker.js");
  // use the handler function in the parent frame (test_require-sri-for_csp_directive.html)
  w.onmessage = parent.handler;
</script>