NOTE: this is not a Discourse bug, but originates in an unofficial plugin (Topic List Previews) - hopefully @Angus can help.
Repro: https://se26.life
Page resources, showing image loaded over HTTP (not HTTPS)
I think this could be resolved by serving up the locally-downloaded image rather than the original image from the remote website.
The TLP plugin probably shouldn’t be serving remotely-hosted images