Mixed Content: The page at 'xxx'

https页面里动态的引入HTTP资源，比如引入一个js文件，会被直接忽略掉的，处理办法：

<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">

意思是将http不安全的请求升级为https