Getting this at moment
I originally had these sort of issues (been playing around using python webservers up until this projects) so I made my python webserver https and all worked - then started playing with NodeRED as server and it all worked without any https/ssl
So maybe its a "feature/bug" that if the webserver is on localhost - the browser decides not to block it if its not https
And down the rabbit hole we go again...............