<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
<img src="http://127.0.0.1:8443/security/resources/compass.jpg">
<script>
window.onload = function() {
    if (window.opener)
        window.opener.postMessage('done', '*');
};
</script>
