CSP 1.1: Refer to ORIGIN as RFC6454.