The worker only ever posts the 'xhr blocked' and 'TEST COMPLETE' messages. The worker never gets a securitypolicyviolation event and therefore never posts the 'violated-directive=connect-src' message.
<rdar://problem/102188067>