Mixed content via XMLHttpRequest not blocked
问题 Suppose the page below is loaded from https://127.0.100.1 . The page makes an XMLHttpRequest to http://127.0.100.2 . This seems like mixed content : The page is loaded over a secure connection and a resource is loaded over an insecure connection. Mixed content should be blocked by the browser. Yet, the page below works just fine.* Why does it work: Why isn't the request blocked? Update: Going beyond the accepted answer, browsers can be configured to block mixed content for such addresses. *