mystix edited a comment on issue #1566: BeaconUrl uses HTTP instead of HTTPS + LoadFromFile not working URL: https://github.com/apache/incubator-pagespeed-ngx/issues/1566#issuecomment-463229592 > Apache: ModPagespeedAddResourceHeader "Content-Security-Policy" "upgrade-insecure-requests;" Nginx: pagespeed AddResourceHeader "Content-Security-Policy" "upgrade-insecure-requests;" > Might help you force browser only request resourse on HTTPS ```Content-Security-Policy``` resolved the mixed content warning issue for me on nginx 1.15.6 (Debian Stretch). I used the nginx directive instead as the pagespeed config wasn't kicking in for me: ```add_header Content-Security-Policy upgrade-insecure-requests;``` NOTE: the mixed content warning doesn't appear when running ngx_pagespeed in standby mode: ```pagespeed standby;``` and requesting the URL with the ```?PageSpeed=on``` query parameter i.e. ```https://example.com?PageSpeed=on```
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
