Web sites mustn't make use of the unsafe-url policy, as this will trigger HTTPS URLs to get uncovered over the wire over an HTTP connection, which defeats on the list of crucial privacy and protection ensures of HTTPS. Through the transit between the browser and the world wide web server, http://XXX