/testing/web-platform/tests/mixed-content/allowed/http-csp/same-host-https/xhr-request/top-level/