Mixed Content: xxx This request has been blocked; the content must be served over HTTPS.

最新推荐文章于 2025-06-08 01:08:05 发布
最新推荐文章于 2025-06-08 01:08:05 发布
阅读量3k 收藏
点赞数
文章标签： 运维 javascript ui ViewUI
本文探讨了在HTTPS页面中引入HTTP资源时遇到的MixedContent问题，并提供了具体的解决方案，即通过使用<meta>标签来自动升级http请求为https。

摘要生成于 C知道 ，由 DeepSeek-R1 满血版支持， 前往体验 >

在升级https的过程中，出现如下问题：

Mixed Content: The page at 'https://www.xxx.com/denglu.html' was loaded over HTTPS, but requested an insecure script 'http://qzonestyle.gtimg.cn/qzone/openapi/qc-1.0.1.js'. This request has been blocked; the content must be served over HTTPS.

 

 

问题抛出：如何在HTTPS 网页中引入HTTP资源： Mixed Content？

问题原因：HTTPS页面里动态的引入HTTP资源，比如引入一个js文件，会被直接block掉的.在HTTPS页面里通过AJAX的方式请求HTTP资源，也会被直接block掉的。

解决方案：

<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">

可以在相应的页面的<head>里加上这句代码，意思是自动将http的不安全请求升级为https

参考：https://thehackernews.com/2015/04/disable-mixed-content-warning.html

 

 

This request has been blocked； the content must be served over HTTPS.
猿小白的博客
05-27 1691
Mixed Content: The page at 'xxxxxx' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://xxxxxx'. This request has been blocked; the content must be served over HTTPS. 解决办法： 在HTML中的head标签中添加下面代码，即可解决此问题。 <meta http-e...
nginx代理服务报Mixed Content: The page at ‘https://xxx.com‘ was loaded over HTTPS
Bertram的博客
04-18 9315
使用nginx代理后端服务时出现如下错误: Mixed Content: The page at ‘https://xxx.com’ was loaded over HTTPS, but requested an insecure stylesheet ‘http://xxx.com’. This request has been blocked. the content must be served over HTTPS. 错误原因: nginx代理的https页面中加载的内容使用的http协议导致报
this request has been blocked;the content must be served over https
止于至善
07-19 2万+
1、错误： this request has been blocked;the content must be served over https 2、遇到错误的情况： 在github page搭建自己写的页面时。搭建成功后，访问自己的页面返回的错误。我的页面阻止的是jQuery的官网引入的jQuery。 &lt;script src="http://code.jquery.com/jqu...
required a bean of type ‘XXXXXX.repository.XXXXX‘ that could not be found.
最新发布
qq_46279755的博客
06-08 275
问题：required a bean of type 'XXXXXX.repository.XXXXX' that could not be found.或者org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'loginController': Injection of resource dependencies failed。
页面跳转报错This request has been blocked； the content must be served over HTTPS
热门推荐
王秀龙
05-26 3万+
js报错： This request has been blocked; the content must be served over HTTPS 报错原因： http、https混合导致的 网站用的是 https 要跳转到 http 请求，被阻止了。 解决方法： 1.页面中都是用 https ，或者都使用 http 2.在 <head> 标签中添加以下代码 <meta http-equiv="Content-Security-Policy" content=.
处理：This request has been blocked； the content must be served over HTTPS.
Goals1989的博客
07-10 6671
https://segmentfault.com/a/1190000021534343 处理：This request has been blocked; the content must be served over HTTPS. 方案一： 具体的解决方法（！！！亲测有效！！！）主要是： <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests"> 可以在相应的页面的<head>里.
Mixed Content: The page at 'https://www.4399.com/flash/78072qh.htm' was loaded over HTTPS, but requested an insecure script 'http://newsimg.5054399.com/js/checkMobile.js'. This request has been blocked; the content must be served over HTTPS. 78072qh.htm:9 Uncaught ReferenceError: check_mobile is not defined at 78072qh.htm:9:9 (匿名) @ 78072qh.htm:9 78072qh.htm:16 document.domain mutation is ignored because the surrounding agent cluster is origin-keyed. (匿名) @ 78072qh.htm:16 78072qh.htm:161 Mixed Content: The page at 'https://www.4399.com/flash/78072qh.htm' was loaded over a secure connection, but contains a form that targets an insecure endpoint 'http://news.4399.com/zmxy3/search.php'. This endpoint should be made available over a secure connection. 78072qh.htm:63 Mixed Content: The page at 'https://www.4399.com/flash/78072qh.htm' was loaded over HTTPS, but requested an insecure frame 'http://sda.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/x3v0529.htm'. This request has been blocked; the content must be served over HTTPS. 78072qh.htm:1 Mixed Content: The page at 'https://www.4399.com/flash/78072qh.htm' was loaded over HTTPS, but requested an insecure script 'http://4399stat.5054399.com/js/click.js'. This request has been blocked; the content must be served over HTTPS. 78072qh.htm:1 Mixed Content: The page at 'https://www.4399.com/flash/78072qh.htm' was loaded over HTTPS, but requested an insecure script 'http://www.4399.com/js/4399stat.js'. This request has been blocked; the content must be served over HTTPS. 78072qh.htm:1 Mixed Content: The page at 'https://www.4399.com/flash/78072qh.htm' was loaded over HTTPS, but requested an insecure script 'http://s25.cnzz.com/stat.php?id=4073713&web_id=4073713&show=pic'. This request has been blocked; the content must be served over HTTPS.
04-02
嗯，用户遇到了Mixed Content错误，需要将所有外部资源升级到HTTPS。首先，我得理解这个问题出现的原因。根据引用[3]，这个错误是因为页面通过HTTPS加载，但其中包含HTTP资源，浏览器出于安全考虑会阻止这些非安全...
JimuReport 出现 Mixed Content: The page at ‘https:xxx‘was loaded over HTTPS, but requested an 解决方法
码农研究僧的博客
10-10 608
Mixed Content: The page at 'https://xx.xx.com/drag/index' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://10.197.0.96/drag/page/queryById?id=993801669564268544'. This request has been blocked; the content must be served ove
Mixed Content: The page at ‘https://xxxx‘ was loaded over HTTPS
整俩下的博客
04-02 906
如果你没有在你的服务器配置中设置X-Frame-Options响应头，大多数现代浏览器会采用默认行为，通常是DENY。因此，如果你不希望页面被嵌入，你不需要设置这个响应头，或者显式地设置为DENY。ALLOW-FROM uri：页面可以被指定来源的页面嵌入，但这个指令已经被废弃，并且不应该再使用。SAMEORIGIN：页面只可以被同源域名下的页面嵌入到iframe或frame中。DENY：页面不会被嵌入到任何iframe或frame中。找到报错对应的页面，在页面模板中引入如下meta标签内容。
Nginx+tomcat部署,并开启https,及遇到的问题解决方案
lixizheng的专栏
11-18 2947
原业务系统部署在云服务器上,通过tomcat部署发布,端口80,未开启SSL. 最近因更换服务器,准备把整体架构升级下,使用https,Web容器使用Nginx+tomcat 整体部署步骤如下: 1.云服务器安装部署tomcat,端口默认8080,将原业务系统迁移完成后,本机访问http://127.0.0.1:8080正常; 2.部署Nginx,监听80端口,代理到http://127.0.0.1:8080 外网访问http://服务器IP 正常,Nginx配置如下: server{
nginx This request has been blocked； the content must be served over HTTPS问题处理
山巅
04-08 2531
例如，当客户端使用HTTPS协议访问Nginx代理服务器，但Nginx代理服务器转发给上游服务器的协议类型为HTTP时，上游服务器会认为这个请求是不安全的，因为它没有收到客户端与Nginx之间的SSL加密通信。此外，还需要确保在Nginx配置文件中启用了proxy_set_header指令。那么，Nginx就会在发送请求给上游服务器时，将"x-forwarded-proto"字段值设置为"https"，这样上游服务器就可以正确地判断请求的协议类型是HTTPS，并做出相应的处理了。
网页访问报错This request has been blocked; the content must be served over HTTPS.
shenxiaomo1688的博客
04-10 2万+
最近搭建服务器，在阿里云上申请了免费Symantec SSL证书(赛门铁克)。安装好证书之后，访问项目时项目样式布局和各项功能均不正常，用谷歌浏览器F12查看时，发现报This request has been blocked; the content must be served over HTTPS.错误，全是CSS和JS文件被拦截了。真是纳闷了。之前我的SSL证书是用letsencrypt+...
解决https页面请求http出现Mixed Content.This request has been blocked； the content must be served over HTTPS.
Johnny's Lab
11-08 1万+
当用户访问通过HTTPS提供的页面时，他们与 Web 服务器的连接使用TLS 进行加密，因此可以防止大多数嗅探器和中间人攻击。这个meta是用于定义浏览器在本页面中的内容安全策略（CSP），值upgrade-insecure-requests的作用表示对页面中资源请求自动升级为https。在nginx的配置中添加响应头，意味着对于所有通过端口（HTTP）访问的请求，Nginx都会添加一个Content-Security-Policy响应头部，指示浏览器将所有HTTP请求升级为HTTPS请求。
记录This request has been blocked； the content must be served over HTTPS.
Funchovy
09-27 1138
记录一下 前端项目部署在服务器上配置的域名是https的， 而接口部署的服务器域名配置的是http的。 HTTPS 是 HTTP over Secure Socket Layer，以安全为目标的 HTTP 通道，所以在 HTTPS 承载的页面上不允许出现 http 请求，一旦出现就是提示或报错。 很简单， 在你配置的接口地址中， 把前面的HTTPS或者HTTP去掉。 ...
谷歌浏览器 This request has been blocked； the content must be served over HTTPS
sally7²⁰²¹
01-19 8620
问题 uniapp 运行到谷歌浏览器时，提示一下错误： 原因 原因是谷歌浏览器的安全机制，屏蔽了http请求，只能通过有数字证书的https请求 解决办法 1 点击链接左边的“不安全”按钮 2 在弹出框中选择网站设置，选择不安全内容为允许就可以了 3 刷新（ctrl + R），搞定。 ...
谷歌浏览器：This request has been blocked； the content must be served over HTTPS.
飞越蓝天的专栏
09-10 7081
最近是做百度小程序的时候，使用百度api_debug工具调试接口的时，出现了下面的报错： xhr.js:172 Mixed Content: The page at 'https://open.baidu.com/static/newopen/api_debug/' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://forge.speedtest.cn/api/v2/baidu/deal'.
【WEB前端】【报错解决】This request has been blocked; the content must be served over HTTPS....
萌狼蓝天の技术栈
11-24 7320
问题描述 部署WEB项目后，开启了强制HTTPS，产生如下错误： Mixed Content: The page at 'https://ask.mllt.vip/index.php/data1.html' was loaded over HTTPS, but requested an insecure favicon 'http://ask.mllt.vip/imgs/profile.png'...
页面跳转报错: This request has been blocked; the content must be served over HTTPS
她们都叫我靓仔
01-16 1万+
报错如下: 原因: http、https混合导致的 HTTPS页面里动态的引入HTTP资源，比如引入一个js文件，会被直接block掉的.在HTTPS页面里通过AJAX的方式请求HTTP资源，也会被直接block掉的。 解决方法: 在报错页面的<head>中加入： <meta http-equiv="Content-Security-Policy"...
flutter webview报错This request has been blocked; the content must be served over HTTPS.
12-05
the content must be served over HTTPS"，这是因为现代浏览器和WebView都默认启用了安全策略，要求所有的请求必须通过HTTPS协议进行，而不是不安全的HTTP协议。 要解决这个问题，可以尝试以下几种方法： 1. **...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值