<!DOCTYPE HTML>
<html>
<head>
  <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
</head>
<body>
<script class="testbody" type="text/javascript">

// 1) same origin navigation
window.open("http://example.com/tests/dom/security/test/csp/file_uir_top_nav_dummy.html");

// 2) same origin navigation
window.open("http://test1.example.com/tests/dom/security/test/csp/file_uir_top_nav_dummy.html");

</script>
</body>
</html>
