gecko-dev/dom/html/test/file_iframe_sandbox_fail.js

ok(
  false,
  "documents sandboxed with allow-scripts should NOT be able to run <script src=...>"
);