security.dataURI

data: URIs do not count as different-origin, and do not taint the canvas

Actual output:

FAIL (fallback content)

Expected output: