Chrome & HTTPS Mixed Content error

Chrome & HTTPS Mixed Content error

Mixed Content: The page at 'https://cdn.xgqfrms.xyz/' was loaded over HTTPS, but requested an insecure resource 'http://example.com/answer'. This request has been blocked; the content must be served over HTTPS.

const postData = (url = ``, data = {}) => {
    // Default options are marked with *
    return fetch(url, {
        body: JSON.stringify(data), // must match "Content-Type" header
        // cache: "no-cache", // *default, no-cache, reload, force-cache, only-if-cached
        // cookies
        // credentials: "same-origin", // include, same-origin, *omit
        headers: {
            // "user-agent": "Mozilla/4.0 MDN Example",
            "Content-Type": "application/json",
            // "Content-Type": "text/plain",
            // "Content-Type": "text/plain",
        },
        method: "POST", // *GET, POST, PUT, DELETE, etc.
        mode: "cors", // no-cors, cors, *same-origin
        // redirect: "follow", // manual, *follow, error
        // referrer: "no-referrer", // *client, no-referrer
    })
    .then(response => response.json()) // parses response to JSON
    .then(json => {
        // json
        console.log(`json =`, JSON.stringify(json, null, 4));
        return json;
    })
    .catch(err => console.error(`error =`, err));
};
undefined
postData(
    "http://example.com/answer",
    {
        answer: 37
    }
).then(data => console.log(data)) // JSON from `response.json()` call
.catch(error => console.error(error));

HTTPS => HTTPS

HTTPS => HTTP

Access to fetch at 'https://example.com/answer' from origin 'https://cdn.xgqfrms.xyz' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.
POST https://example.com/answer net::ERR_FAILED

HTTP => HTTP

POST http://example.com/answer 404 (Not Found)

Access to fetch at 'http://example.com/answer' from origin 'http://localhost:52330' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.

refs

---

---

©xgqfrms 2012-2020

www.cnblogs.com 发布文章使用：只允许注册用户才可以访问！

原创文章，版权所有©️xgqfrms, 禁止转载 🈲️，侵权必究⚠️！

---