Block all mixed content

Question

How to completely prevent unwanted mixed content from downloading?

Current browsers are already blocking active mixed content (scripts). I really want to block all of this, including images.

The purpose of this is to immediately see all corrupted images or files as broken, but not as an ambiguous warning in the address bar.

Is there a way to cross browser?

Answer 1

The standard way to strictly block all mixed content: the block-all-mixed-contentCSP directive .

, CSP, :

Content-Security-Policy: block-all-mixed-content

, :

Content-Security-Policy: img-src https: data:

- HTTP- https:

Content-Security-Policy: upgrade-insecure-requests