Content-Security-Policy: img-src https:

This will try to load image over HTTP.
Edument logo
Some browsers will automatically upgrade the request fron

This will try to load image over HTTPS.
Google logo
(You should see Google logo)