<!DOCTYPE html>
<html>
<head>
<script>
    document.cookie = "secureCookie=yes;secure";
    console.log(document.cookie);
</script>
<link rel="stylesheet" href="https://127.0.0.1:8443/security/mixedContent/resources/insecure.css">
</head>
<body>
Loading css cursor from insecure source.
<script>
if (window.opener)
  window.opener.postMessage('done', '*');
</script>
</body>
</html>