Web sites mustn't use the unsafe-url coverage, as this will lead to HTTPS URLs to be exposed over the wire above an HTTP relationship, which defeats one of many significant privacy and safety assures of HTTPS. In the transit amongst the browser and the web server, HTTPS shields the data http://XXX