nginx add_header Content-Security-Policy “upgrade-insecure-requests;connect-src *“;
背景是这样 后端写了个静态网页,页面里面有对资源http的调用,导致js在请求时,报了个错Mixed Content: The page at 'https://huangkaikang.com/' was loaded over HTTPS, but requested an insecure frame 'http://huangkaikang.com/resume/'. This request has been blocked; the content must be served over
原创
2021-02-25 00:13:19 ·
7810 阅读 ·
4 评论