/testing/web-platform/meta/mixed-content/blockable/no-opt-in/same-host-http/xhr-request/