Script tests check whether shouldInterceptRequest is called for every script-loading mechanism. A blocked script shows onerror or the global variable it would define remains undefined. Dynamic import() is CORS-gated; jsdelivr.net serves Access-Control-Allow-Origin: *.