Web sites must not use the unsafe-url policy, as this can cause HTTPS URLs to become exposed about the wire in excess of an HTTP connection, which defeats among the vital privateness and security assures of HTTPS. HTTP would be the avenue by which information and facts is shipped over http://XXX