Tests that default-src does. If this test passes, you will see a page indicating a form was POSTed or a blocked pop-up warning.