fn do_settings_prohibit_mixed_security_contexts( request: &Request, ) -> MixedSecurityProhibited
https://w3c.github.io/webappsec-mixed-content/#categorize-settings-object