This script should not execute even through the second CSP header would allow it.