<!DOCTYPE html>
<html>
<head>
<script>
if (window.testRunner)
    testRunner.dumpAsText();
</script>
<meta http-equiv="Content-Security-Policy" content="object-src 'none'">
</head>
<body>
This test passes if there is a console message saying the plugin was blocked.
<embed src="/resources/square20.jpg"></embed>
</body>
</html>