Sites must not use the unsafe-url policy, as this may bring about HTTPS URLs to be uncovered on the wire more than an HTTP connection, which defeats one of many crucial privacy and protection ensures of HTTPS. HTTPS is currently the popular protocol for all exercise on the Web, as http://XXX