Websites shouldn't utilize the unsafe-url policy, as this tends to lead to HTTPS URLs for being exposed over the wire around an HTTP relationship, which defeats one of the essential privateness and security assures of HTTPS. HTTPS is now the popular protocol for all action online, as it is the http://XXX