当浏览器出现“was loaded over HTTPS, but requested an insecure resource/frame”这种错误是,一般都是因为网站是HTTPS的,而对方的链接是HTTP协议的,因此在Ajax或者javascript请求时,就会报如下这种错误,iframe加载不出来:
Mixed Content: The page at "https://www.xxx.html" was loaded over HTTPS, but requested an insecure frame "http://www.xx.html". This request has been blocked; the content must be served over HTTPS.
解决方案:
在网站<head>标签里面加入如下内容即可:
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
它会自动将HTTP请求升级成安全的HTTPS请求。