FAIL: cross-site assignment of location.protocol was allowed.