[javascript-url-security-check-failure.sub.html]
  [cross-origin, setting src]
    expected: FAIL

  [cross-origin-domain but same-origin, setting src]
    expected: FAIL

  [cross-origin-domain but same-origin, setting location.href]
    expected: FAIL