/testing/web-platform/meta/mixed-content/allowed/meta-csp/
../
same-host-https