<!DOCTYPE html>
<html>
<head>
    <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
    <script>
    if (window.testRunner) {
        testRunner.waitUntilDone();
        testRunner.dumpAsText();
    }

    window.addEventListener("message", function (e) {
        if (window.opener)
            window.opener.postMessage('done', '*');
    }, false);
    </script>
</head>
<body>
<div>
    <p>The following window is loaded using 'http', and should not be upgraded because it is going to a different
origin. This should generate a '400 - Bad Request'.
        <script>
        window.open("http://localhost:8443/security/contentSecurityPolicy/upgrade-insecure-requests/resources/nested-nested-window.html");
        </script>
    </p>
<div>
<div>
    <p>The following script is loaded using 'http', but it should be upgraded to 'https' due to the
'upgrade-insecure-requests' header.</p>
    <script src="http://127.0.0.1:8443/security/contentSecurityPolicy/resources/alert-pass.js"></script>
<div>
<div>
    <p>The following document is loaded using 'http', but should be upgraded because it is an origin we have previously upgraded.</p>
    <script>
    window.open("http://127.0.0.1:8443/security/contentSecurityPolicy/upgrade-insecure-requests/resources/nested-nested-window.html");
    </script>
<div>
</body>
</html>
