Test that dangerous attributes are still filtered in netsted script contexts.