CSP, Mixed-Content and Sec-Headers are working correctly.