Use only filesystem: or blob: URLs for shared worker script (data: violates ross-origin)