This test checks that Content Security Policy delivered via a meta element is not enforced if the element is outside the document's head.