When migrating to a full HTTPS site, Content-Security-Policy and Upgrade-Insecure-Requests could be your friend. This post tells you the use of the headers and the mechanism to implement it during the site migration.