We don't check on script anymore, but we still check on window.ace making very unlikely to regress.
to avoid Content Security Policy unsafe-line violations