<!DOCTYPE html>
<html>
<head>
<script>
    document.cookie = "secureCookie=yes;secure";
    console.log(document.cookie);
</script>
<link rel="stylesheet" href="https://127.0.0.1:8443/security/mixedContent/resources/insecure-executable.css">
</head>
<body id="test">
Loading css document from insecure source.
<script>
if (window.opener)
    window.opener.postMessage('done', '*');
</script>
</body>
</html>