Mixed Content: The page at 'https://ng.sgcc.com.cn/zsj/sy...' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://sgcy-oss-product1.oss-...'. This request has been blocked; the content must be served over HTTPS.
Mixed Content: The page at 'https://ng.sgcc.com.cn/zsj/sy...' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://sgcy-oss-product1.oss-...'. This request has been blocked; the content must be served over HTTPS.
8 回答2.7k 阅读
2 回答5.1k 阅读✓ 已解决
5 回答1.3k 阅读
3 回答2.2k 阅读
1 回答829 阅读✓ 已解决
2 回答749 阅读✓ 已解决
2 回答882 阅读✓ 已解决
你这不是跨域问题(虽然确实有跨域,但问题原因不是因为跨域),而是“混合内容”(Mixed Content)的问题。
对于目前的主流浏览器安全策略而言,如果你的网页是 https 的,那么网页里请求的资源就必须也得是 https 的。
看起来你现在在用 OSS 源站域名,我记得它有提供 https 接入点的,换成那个。