<!DOCTYPE html>
<html>
<title>Cross Site HTTPS upgrade</title>

<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">

<body>
  <iframe src="http://other.com/title1.html"></iframe>
</body>
</html>