Check that a SecurityPolicyViolationEvent strips detail from cross-origin blocked URLs.