<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline'">
<script src="../resources/dump-as-text.js"></script>
<script src="../resources/wait-until-done.js"></script>
</head>
<body>
This test passes if it doesn't alert FAIL and does alert PASS.
<object data="http://127.0.0.1:8000/security/resources/abe.png" type="image/png" onload="alertAndDone('PASS')" onerror="alertAndDone('FAIL')"></object>
<video controls></video>
</body>
</html>
