Scripts ran on a new page

[GarretPolk]

I opened a link from Discord to this site and the game (scripts) ran!

Steps to reproduce:

1. Close Chrome completely.
2. Click link from external source. I got it from Discord.

Scripts will run, it's a game (not mine).

I then clicked Deny, which blocked it, then Clear. The scripts no longer run, which is the expected behavior. I've never visited this site before. Block is my default setting.

If you clear the setting and close Chrome it can be reproduced.

https://ea.vodbox.io/SelfReflection/

Chrome Version 62.0.3202.94 (Official Build) (64-bit)
ScriptSafe v1.0.9.1

Thanks.

[edit: updated with steps to repro]

[atripes]

Can confirm the behaviour. It's even worse: the default block setting does nothing. Everything runs on new sites, until I manually distrust or deny it. I am on Opera 49.0.2725.39.