This tests whether hash-src are normalized from base64url to base64. It passes if no CSP violation is generated, and the alert_assert() calls are executed.