generated at
CSP: upgrade-insecure-requests