That feeling when you discover that a spec says something that matches none of the implementations, the editor is likely to be non-responsive, and the spec is for a security feature.
Sure, lots of tests. The feature is CSP. Whether the tests match the spec, who knows. See https://github.com/w3c/webappsec-csp/issues/400 … for the specific issue I was tweeting about: CSP2 said one thing, CSP3 another, browsers implement CSP2, tests presumably predate CSP3, if they test this at all.