<?php
   $base_url = str_replace($_SERVER['DOCUMENT_ROOT'], "", dirname($_SERVER['PHP_SELF']));
   $http_url = "http://".$_SERVER['HTTP_HOST'].$base_url;

   header("Content-Security-Policy: img-src https://*");
?>
<!DOCTYPE html>
<html>
   <body>
      <p id="text1">This page needs to be loaded in HTTPS domain.</p>

      <!-- Mixed-content Image. -->
      <div>
         <img id="image1" width="200" height="112" src="<?=$http_url?>/image.jpg">
      </div>
   </body>
</html>
