<!DOCTYPE html>
<html>
<body>
    <p>This page should be loaded insecurely as a navigation from the secure site 'secure-second-site.html'. The secure domain should have set the Upgrade-Insecure-Requests header,
       but this new navigation should have cleared this state.</p>
    <div>
        <p>The following script is loaded using 'http', and should NOT be upgraded to 'https'.</p>
        <script src="http://localhost:8000/security/contentSecurityPolicy/resources/alert-pass.js"></script>
        <p>If this test passes there should be two PASS messages in the output.</p>
    <div>
    <script>
    if (window.testRunner)
       testRunner.dumpBackForwardList();
    </script>
</body>
</html>