gecko-dev/dom/security/test/csp/file_punycode_host_src.js

const LOADED = true;
parent.postMessage({result: 'script-allowed'}, "*");