<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
<script src="/js-test-resources/js-test-pre.js"></script>
<div>
    <p>The following script is loaded using 'http', but it should be upgraded to 'https' due to the
'upgrade-insecure-requests' header.</p>
    <script src="http://127.0.0.1:8443/security/contentSecurityPolicy/resources/alert-pass.js"></script>
<div>
<iframe src="https://127.0.0.1:8443/security/contentSecurityPolicy/upgrade-insecure-requests/resources/nested-nested-frame.html"></iframe>
