Placeholder: untrusted content origin (T01.07). No script, no cookies.