当浏览器出现“was loaded over HTTPS, but requested an insecure resource/frame”这种错误是，一般都是因为网站是HTTPS的，而对方的链接是HTTP协议的，因此在Ajax或者javascript请求时，就会报如下这种错误，iframe加载不出来：

Mixed Content: The page at "https://www.xxx.html" was loaded over HTTPS, but requested an insecure frame "http://www.xx.html". This request has been blocked; the content must be served over HTTPS.

解决方案：

在网站<head>标签里面加入如下内容即可：

<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">

它会自动将HTTP请求升级成安全的HTTPS请求。

更多推荐

修复报错Mixed Content: The page at “https://“ was loaded over HTTPS, but requested a