<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
This page includes an insecure script that alerts "PASS". Although it is blocked by CSP, it should be upgraded and executed.
<script src="http://127.0.0.1:8443/security/contentSecurityPolicy/resources/alert-pass.js"></script>