Web sites mustn't utilize the unsafe-url policy, as this can bring about HTTPS URLs to become exposed about the wire around an HTTP connection, which defeats one of many significant privateness and stability guarantees of HTTPS. HTTP may be the avenue by which facts is sent over the web. HTTPS http://XXX