Stack Overflow
Stack Overflow

Questions tagged [mixed-content]

HTTPS page that includes content retrieved through cleartext HTTP

Mixed content occurs when a document served over HTTPS contains content retrieved through cleartext HTTP. That makes the connection only partially encrypted and vulnerable to man-in-the-middle attacks. Therefore, browsers block such mixed content.

https://w3c.github.io/webappsec-mixed-content/ defines the relevant requirements for browsers.

335 questions
8
votes
3 answers

Mixed content error when using github pages with custom domain

I'm hosting my git-hub pages website (peps09791.github.io) using a custom domain (https://thebotspeaks.com) with Cloudflare. To enable HTTPS, I have done the following configurations: In my _config.yaml file I have set the URL key accordingly url:…
Piyp791
  • 649
  • 1
  • 13
  • 28
8
votes
2 answers

IE 10 and 11 hang when "Mixed Content" dialog appears

We are looking for solution to resolve strange IE browser behaviour when Mixed Content Warning Dialog appears. We develop a video platform based on Silverlight 5. The site relies on the HTTPS protocol, but video content is being transmitted via…
Alex Karlovich
  • 81
  • 4
8
votes
4 answers

How can a web page send a message to the local network

Our web application has a button that is supposed to send data to a server on the local network that in turn prints something on a printer. So far it was easy: The button triggered an AJAX POST request to http://printerserver/print.php with a token,…
AndreKR
  • 32,613
  • 18
  • 106
  • 168
7
votes
1 answer

Random Mixed Content Issue

I am having a weird mixed content request blocking issue from my web site and trust me I have beeing googling to resolve this issue for more than couple of months already. I am using AngularJS1 as front-end and Spring boot as back-end. When I…
Jake Kim
  • 112
  • 7
6
votes
3 answers

Javascript catch mixed content error to handle gracefully

Is there a way to globally catch mixed content errors? To be clear: I don't want to allow the insecure content, all I want to do is handle the error gracefully. Backstory: I'm integrating programmatic ads, that is i have to include some script tag,…
joergipoergi
  • 339
  • 3
  • 6
6
votes
1 answer

webpack dev server mixed content error

I'm running React based website on Cloud9 using webpack-dev-server, so it serves content over https. The problem is that when I try to make some ajax (network) request to external http link, it gives the following error: Mixed Content: The page at…
Rashad Ibrahimov
  • 3,279
  • 2
  • 18
  • 39
6
votes
1 answer

Block all mixed content

How do I completely prevent any mixed content from loading? Current browsers are already blocking active mixed content (scripts). What I really want is to block all of it including images. Purpose of this is to immediately see every offending…
sanmai
  • 29,083
  • 12
  • 64
  • 76
6
votes
4 answers

Easy reverse proxy for serving images over ssl

I created a simple web-based email client like gmail. I want to display images, but in order to do it with my ssl site, I need all images served over ssl (otherwise I get "mixed-content" warnings). So I need a reverse proxy like gmail has to serve…
richard
  • 12,263
  • 23
  • 95
  • 151
6
votes
1 answer

Catching Mixed content error

I'm trying to detect an XHR failing on mixed content. It looks like different browsers have different implementations: var xhr = new XMLHttpRequest(); try { xhr.open('http://otherdomain/'); } catch (err) { console.log(err); // IE10 hits this…
Jorn
  • 20,612
  • 18
  • 79
  • 126
6
votes
2 answers

Mixed Content: Call http content from API from https page

My page is on https but the API url I am calling in AJAX is on http. I am unable to get the AJAX response. Mixed Content: The page at 'https://localhost:8443/examples/demo.html' was loaded over HTTPS, but requested an insecure XMLHttpRequest…
Faizan
  • 1,847
  • 8
  • 40
  • 63
5
votes
1 answer

Localhost HTTP accessed from HTTPS webpage. Why no "Mixed Content" error?

I make a HTTP request: from a HTTPS JSFiddle: fetch('http://localhost:8090').then(...) to HTTP localhost or 127.0.0.1 And it works. No "Mixed Content" errors in Chrome (v89.0.4389.90) and Firefox (v86.0.1). Only Safari blocks the request. However,…
Andrey Moiseev
  • 3,914
  • 7
  • 48
  • 64
5
votes
0 answers

Avoiding mixed content messages when using a custom URL Protocol from secure webpages

I'm researching how to use Custom URL Application Protocols (such as custom://) to launch my local installed application. When I'm accessing my website on http (without SSL) everyting runs fine and when enetering the page the local application get's…
Bart
  • 144
  • 1
  • 12
5
votes
1 answer

Allow/activate mixed content in Browser

I'm currently build my website and I face a problem the Mixed Content blocking in JavaScript which occur with Chrome, Mozilla and Explorer when I tried to load and display image and page coming from http request which I had built it with…
gerard talla
  • 165
  • 2
  • 3
  • 8
5
votes
1 answer

How to get Latest Chrome (Version 55) to allow mixed content?

I have a chrome extension that communicates using HTTP in development and HTTPS in production. I run it from webpages that use HTTPS. When I use this extension in my development mode I get the following error. Mixed Content: The page at…
David Cruwys
  • 6,262
  • 12
  • 45
  • 91
5
votes
1 answer

Why is my https:// request cancelled and changed to http://, causing a mixed request error?

I've got some simple lazy-loading javascript: script.type = 'text/javascript'; script.src = 'https://example.com/'+urlToJavascript; script.onreadystatechange = callback; script.onload = callback; head.appendChild(script); SSL is running on my…
Emmanuel
  • 4,933
  • 5
  • 46
  • 71
1
2
3
…
22 23