Blockable content

Test behavior of blockable content.

opt_in_method: http-csp
                                 origin: same-host-http
                                 source_scheme: https
                                 context_nesting: top-level
                                 redirection: no-redirect
                                 subresource: xhr-request
                                 expectation: blocked

See specification details for this test.