gecko-dev/dom/security/test/csp/file_sandbox_pass.js

function ok(result, desc) {
  window.parent.postMessage({ok: result, desc: desc}, "*");
}
ok(true, "documents sandboxed with allow-scripts should be able to run <script src=...>");