Web sites must not utilize the unsafe-url policy, as this may cause HTTPS URLs to be uncovered over the wire about an HTTP connection, which defeats one of the critical privateness and protection guarantees of HTTPS. HTTPS is currently the popular protocol for all action on the Web, as it's http://XXX