不换https,使用CSP(Content-Security-Policy)解决/缓解运营商dns劫持问题

The HTTP Content-Security-Policy response header allows web site administrators to control resources the user agent is allowed to