/* neutralized: origin serves text/html here, so this reference applies no rules on the origin either. */