Sites shouldn't use the unsafe-url policy, as this will induce HTTPS URLs being exposed around the wire over an HTTP relationship, which defeats among the list of critical privacy and protection guarantees of HTTPS. Update CDN SSL: This step is barely essential In case you are utilizing a articles shipping http://XXX