在线观看视频一区二区,国产中文一区二区三区,狠狠爱www人成狠狠爱综合网

本文介紹了從 HTTPS 頁面到 HTTP(非 HTTPS)本地主機地址的混合內容請求未被阻止的處理方法，對大家解決問題具有一定的參考價值，需要的朋友們下面隨著小編來一起學習吧！

問題描述

假設下面的頁面是從 https://127.0.100.1 加載的.該頁面向 http://127.0.100.2 發出 XMLHttpRequest.這似乎是混合內容:頁面通過安全連接加載，資源通過不安全連接加載.混合內容應被瀏覽器阻止.然而，下面的頁面運行良好.* 為什么會運行:為什么請求沒有被阻止?

Suppose the page below is loaded from https://127.0.100.1. The page makes an XMLHttpRequest to http://127.0.100.2. This seems like mixed content: The page is loaded over a secure connection and a resource is loaded over an insecure connection. Mixed content should be blocked by the browser. Yet, the page below works just fine.* Why does it work: Why isn't the request blocked?

更新:超越接受的答案，瀏覽器可以配置來阻止此類地址的混合內容.

Update: Going beyond the accepted answer, browsers can be configured to block mixed content for such addresses.

^{* Wireshark 確認瀏覽器沒有通過安全連接加載資源.}

<html>
<body>
<img id="dst"/>
<script>
  let xhr = new XMLHttpRequest();
  xhr.open('get', 'http://127.0.100.2/img.jpg');
  xhr.responseType = 'blob';
  xhr.onload = function(){
    document.getElementById('dst').src = URL.createObjectURL(xhr.response);    
  }
  xhr.send();
</script>
</body>
</html>

久久久久久久av_日韩在线中文_看一级毛片视频_日本精品二区_成人深夜福利视频_武道仙尊动漫在线观看

從 HTTPS 頁面到 HTTP(非 HTTPS)本地主機地址的混合內

問題描述

推薦答案

相關文檔推薦