Sites shouldn't make use of the unsafe-url plan, as this tends to cause HTTPS URLs for being exposed over the wire around an HTTP connection, which defeats one of many crucial privacy and security assures of HTTPS. HTTPS has become the popular protocol for all action on the internet, as http://XXX