html头部有一行信息导致所有的css和jss都是 https了 <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">