CORS=CSP- Handle mixed content - mixed content the page at was loaded over https

问题描述

从HTTPS访问HTTP，违法了Chrome的安全规则

mixed content the page at was loaded over https

but requested an insecure XMLHttpRequest endpoint

This request has been blocked; the content must be served over HTTPS.

解决方案

1.修改meta允许这么访问

<meta http-equiv="Content-Security-Policy" 

content="upgrade-insecure-requests">

2.把http的连接全部改成https

3.在瀏覽器中啟用混合內容

如果您的網站在不安全(HTTP)網域上執行，您必須允許VEC載入作用中的混合內容。

The Chromium 14 release will come with an inverse flag: --allow-running-insecure-content, as a convenience for users and admins who have internal applications without immediate fixes for these errors.

C:\Program Files\chrome.exe" --allow-running-insecure-content  没有验证

或者