When using `window.onerror` in the bootstrap script that is hosted in a CDN the error message will show `"Script error."` instead of a proper error message. This is because of the [cross-origin](https://blog.sentry.io/2016/05/17/what-is-script-error/) script. To fix this issue a `crossorigin="anonymous"` attribute needs to be added in the script tag.

Currently, `bootstrapScripts` supports [`src` and `integrity`](https://github.com/facebook/react/blob/0fce6bb498357feb4465859912004b2e20fe7084/packages/react-dom-bindings/src/server/ReactDOMServerFormatConfig.js#L226) as configurations, should it also supports a `crossorigin` property?


it('the "S" in "</?[Ss]cript" strings are replaced with unicode escaped lowercase s or S depending on case, preserving case sensitivity of nearby characters', async () => {
      window.__test_outlet = '';
      const stringWithScriptsInIt =
        'prescription pre<scription pre<Scription pre</scRipTion pre</ScripTion </script><script><!-- <script> -->';
      await act(() => {
        const {pipe} = renderToPipeableStream(<div />, {
          bootstrapScriptContent:
            'window.__test_outlet = "This should have been replaced";var x = "' +
            stringWithScriptsInIt +
            '";\nwindow.__test_outlet = x;',
        });
        pipe(writable);
      });
      expect(window.__test_outlet).toMatch(stringWithScriptsInIt);
    });
    it('does not escape \\u2028, or \\u2029 characters', async () => {
      
      
      
      
      window.__test_outlet = '';
      const el = document.createElement('p');
      el.textContent = '{"one":1,\u2028\u2029"two":2}';
      const stringWithLSAndPSCharacters = el.textContent;
      await act(() => {
        const {pipe} = renderToPipeableStream(<div />, {
          bootstrapScriptContent:
            'let x = ' +
            stringWithLSAndPSCharacters +
            '; window.__test_outlet = x;',