Test that script elements that are fetched with CORS enabled and conditionally, pass the expected access controls.