/testing/web-platform/tests/mixed-content/blockable/meta-csp/same-host-http/xhr-request/