https://chromeenterprise.google/policies/#DefaultJavaScriptJ...
And this existed before SDSM... in fact SDSM depends on the code landed in Chrome that backs this policy.