security.pattern.canvas.fillStyle
Setting fillStyle to a pattern of an unclean canvas makes the canvas origin-unclean
Spec references: security.fillStyle.canvas
Actual output:
Failed assertion: should throw exception: canvas.toDataURL()
Failed assertion: should throw exception: ctx.getImageData(0, 0, 1, 1)