content-security-policy/support/post-message.js

postMessage("importScripts allowed");