问题现象:
1、从系统导出excel文件(OSS地址的文件)时,浏览器弹框提示如下,或者点击导出按钮后浏览器没有任何反应,但是控制台报错如下
客户浏览器控制台报错(https地址访问https的OSS地址):
Mixed Content: The site at 'https://zpssc*******.com/' was loaded over a secure connection, but the file at 'https://******.oss-cn-hangzhou.aliyuncs.com/file/tkrl/ruirenyun-my-temp/20250428/20250428115625127-837-%E5%AF%BC%E5%85%A5%E5%85%A5%E8%81%8C%E4%BA%BA%E5%91%98%E5%A4%B1%E8%B4%A5%E5%90%8D%E5%8D%95.xlsx?Expires=1745812885&OSSAccessKeyId=LTAI5t7x4t6NNGkqsANR6MBA&Signature=qgTBSPoWQKrhczQCLCrTp0igsKE%3D' was redirected through an insecure connection. This file should be served over HTTPS. See https://blog.chromium.org/2020/02/protecting-users-from-insecure.html for more details.
我的浏览器控制台报错内容(https地址访问http的OSS地址):
Mixed Content: The site at 'https://zpssc.*******.com/' was loaded over a secure connection, but the file at 'http://******.oss-cn-hangzhou.aliyuncs.com/file/tkrl/ruirenyun-my-temp/20250428/20250428131909340-338-%E5%AF%BC%E5%85%A5%E5%85%A5%E8%81%8C%E4%BA%BA%E5%91%98%E5%A4%B1%E8%B4%A5%E5%90%8D%E5%8D%95.xlsx?Expires=1745817849&OSSAccessKeyId=LTAI5t7x4t6NNGkqsANR6MBA&Signature=TEmiTTwh7iWMmg%2F3RBRN47tH2Yw%3D' was loaded over an insecure connection. This file should be served over HTTPS. See https://blog.chromium.org/2020/02/protecting-users-from-insecure.html for more details.
报错原因:
Mixed Content(混合内容) 是指 HTTPS 网页中加载了 HTTP 资源(如图片、脚本、CSS、API 请求等),Chrome 默认会拦截这些不安全的内容。
问题分析:
1、客户出现问题的现象是从https的域名访问https的OSS地址(https访问https理论上不应该报错Mixed Contend),但是我本地利用相同的环境进行复现时是https的域名地址访问http的OSS地址(正是报错Mixed Contend的原因)。所以:推测客户的https的OSS地址可能是被浏览器将http的地址强转成https的,实际访问下载资源的时候还是http的地址;
2、验证推测:通过抓包确认后台接口返回的OSS地址就是http格式的,问题根因就确认了;
解决措施:
1、临时解决方案:在浏览器中招聘系统的地址栏最前面的图标点击打开后,点击:网站设置——隐私与安全——不安全内容:将默认的“屏蔽”改成“允许”,即可正常下载文件
2、根本解决方案:联系运维将招聘系统后台配置文件OSS地址由http改成https然后重启系统,确保接口返回的OSS地址是https开头即可。