/testing/web-platform/tests/mixed-content/allowed/meta-csp/