tree: 3ba4c4b7eb8c86f69f784375a4dff3439f9aabf6
  1. cross-origin-http/
  2. same-host-http/
  3. same-host-https/