css - 由于 CSS 背景图像，SSL 和混合内容

Question

我有一个包含报名表的网页。通过 Apache 重定向为匹配该页面的所有请求启用 HTTPS。不幸的是，由于 CSS 使用“background-image: url(/images/...)”提取外部图像，因此浏览器将生成一条警告消息，指出该页面包含混合内容。

解决此问题的最佳方法是什么？

Answer 1

Update 2014.12.17:

Now that SSL is encouraged for everyone and doesn’t have performance concerns, this technique is now an anti-pattern. If the asset you > need is available on SSL, then always use the https:// asset.

Allowing the snippet to request over HTTP opens the door for attacks like the recent Github Man-on-the-side attack. It’s always safe to request HTTPS assets even if your site is on HTTP, however the reverse is not true.

More guidance and details in Eric Mills’ guide to CDNs & HTTPS.

来源:Paul Irish – The Protocol-relative URL

---

这是一个非常流行的解决方案:

有一个小技巧可以让你省去一些麻烦:

在 HTML 中

<img src="//domain.com/img/logo.png">

在 CSS 中

div{background: url(//path/to/image.png);}