This tests that a valid hash value disables inline JavaScript, even if 'unsafe-inline' is present.