Upstream Blink's 'securitypolicyviolation' tests.

third_party/WebKit/LayoutTests/external/wpt/content-security-policy/support/testharness-helper.js

 function assert_no_csp_event_for_url(test, url) {
-  document.addEventListener("securitypolicyviolation", test.step_func(e => {
+  self.addEventListener("securitypolicyviolation", test.step_func(e => {
     if (e.blockedURI !== url)
       return;
     assert_unreached("SecurityPolicyViolation event fired for " + url);
   }));
 }
 
 function assert_no_event(test, obj, name) {
   obj.addEventListener(name, test.unreached_func("The '" + name + "' event should not have fired."));
 }
 
 function waitUntilCSPEventForURL(test, url) {
   return new Promise((resolve, reject) => {
-    document.addEventListener("securitypolicyviolation", test.step_func(e => {
+    self.addEventListener("securitypolicyviolation", test.step_func(e => {
       if (e.blockedURI == url)
         resolve(e);
     }));
   });
 }
 
 function waitUntilEvent(obj, name) {
   return new Promise((resolve, reject) => {
     obj.addEventListener(name, resolve);
   });
@@ skipping 95 matching lines @@
       waitUntilCSPEventForURL(t, reportedURL)
         .then(t.step_func_done(e => {
           assert_equals(e.blockedURI, reportedURL);
           assert_equals(e.violatedDirective, "worker-src");
           assert_equals(e.effectiveDirective, "worker-src");
         })),
       promise_rejects(t, "SecurityError", navigator.serviceWorker.register(url, { scope: url }))
     ]);
   }, description);
 }
-