Make policy.js warn at dynamic sources, too.