/testing/web-platform/tests/mixed-content/allowed/
../
http-csp
meta-csp
no-opt-in