It will run if its in an <object> tag.

So if you're directly embedding the thing. This is a somewhat rare use case, should not be banned almost anywhere...