Stack Overflow
Stack Overflow

Questions tagged [mixed-content]

HTTPS page that includes content retrieved through cleartext HTTP

Mixed content occurs when a document served over HTTPS contains content retrieved through cleartext HTTP. That makes the connection only partially encrypted and vulnerable to man-in-the-middle attacks. Therefore, browsers block such mixed content.

https://w3c.github.io/webappsec-mixed-content/ defines the relevant requirements for browsers.

335 questions
0
votes
1 answer

Mixed Content Blocking in Firefox

Firefox says over here that they have active mixed content blocked by default: Starting in Firefox 23, mixed active content is blocked by default However, when I try to see the behavior of businessinsider.com (a site with lots of insecure links),…
QPTR
  • 1,620
  • 7
  • 26
  • 47
0
votes
2 answers

Wordpress www to non www domain migration

I have a wordpress website www.domain.com and we just purchased an SSL certificate but it's only working on domain.com (without the www). I have my .htaccess and site url configured RewriteEngine on RewriteCond %{HTTP_HOST} ^domain.com…
Andrei
  • 177
  • 13
0
votes
2 answers

My GitHub page (css, js, style) doesn't work correctly

I'm entirely new to GitHub and I am facing some problems while trying to create my first project. I am using GitHub (username.github.io) to preview (live). But locally my work is well but not in Github pages. In Github pages, it doesn't work any…
mostafiz67
  • 159
  • 1
  • 9
0
votes
1 answer

Experiencing the mixed content error while trying to load facebook application

I've got my application on facebook. Its working on https. Recently I've set up the apache reverse proxy. Proxy is doing redirect from https to http port 8080 of tomcat. The game is working if accessed directly. While if accessed from facebook there…
maximus
  • 4,201
  • 15
  • 64
  • 117
0
votes
2 answers

Angular2 http.get results in a Mixed Content error or No 'Access-Control-Allow-Origin' header

I am trying but unable to do a http.get request. Below is the relevant parts of the Service I am using. import { Injectable } from '@angular/core'; import { Http, Response, Headers,RequestOptions } from '@angular/http'; import…
Rohan
  • 1,312
  • 3
  • 17
  • 43
0
votes
1 answer

tarruda datetimepicker link does not working on https

I am using tarruda datetimepicker for my project, it works all good until I move to https. Tarruda datetimepicker link is http. I get warning Mixed Content: The page at 'https://mywebsite.com' was loaded over HTTPS, but requested an insecure…
may
  • 675
  • 1
  • 10
  • 26
0
votes
1 answer

Why does ember-cli build with wrong host?

I am currently at the state of deploying one of my ember applications to a server with Ubuntu LTS + Apache/Nginx configuration. However, it seems that the build process is doing something wrong maybe due to missing information from my side. My…
Michael Andorfer
  • 1,660
  • 5
  • 25
  • 45
0
votes
0 answers

Mixed content error inside the lib jquery-2.2.3.min.js

I'm using a few lines of JavaScript inside an https webpage that I'm uploading. I call the jQuery library as well as the ajax one in the using this code:
Daniele Laura Sella
  • 9
  • 4
0
votes
2 answers

non secure items on secure page

I have an e-commerce site with an SSL installed. I have made sure all links are https:// to avoid getting the browser error saying there are non secure items on the page. However, I have a news and press feed in my footer which links to another…
Shae
  • 319
  • 1
  • 4
  • 20
0
votes
1 answer

AngularJS CORS Request from SSL Domain to non-SSL Domain fails with "Access Denied" before doing the call

I am developing a LOB web application that runs on the local intranet using AngularJS (v1.4.8). One feature includes calling another intranet LOB web application using CORS/JSON. I was able to make the call and displaying the result in a near…
Marc Wittke
  • 2,991
  • 2
  • 30
  • 45
0
votes
2 answers

Mixed Content: HTTPS site without specification

I am writing a program which will look for Mixed Content within a URL. The aim of this script is to extract all links in a page and convert these links to absolute links, and then to see if the content is mixed. lets say we have this page…
user3853149
  • 35
  • 5
0
votes
1 answer

How can I link from Heroku to github pages via iframe?

My heroku app depends on github pages via iframes, which doesn't work as the browser tells me its Mixed content. So produces an empty iframe with the chrome console error Mixed Content:…
lve
  • 438
  • 5
  • 14
0
votes
1 answer

Wordpress Menu Font Failing After SSL Install

The font that is supposed to be showing for my menu and home section subtitle text is called Oswald. I had no problems at all with any fonts changing before I installed my SSL into my website. Which is through Go Daddy. Called them and they could…
Cypher
  • 3
  • 3
0
votes
0 answers

Play embedded flash object on a https page

I migrated my blog to ssl/https, but some videos stopped playing so I've tweaked their urls from something like http://vk.com to https://vk.com However, I also relay economic video from BFMTV which are in flash, and I'm unable (with the same tweak)…
folamour
  • 1
  • 1
0
votes
1 answer

Mixed Content with http://ajax.aspnetcdn.com/ajax/4.5.1/1/WebForms.js

I have a web application using ASP.NET 4. It displayed error below : Mixed Content: The page at 'https://... was loaded over HTTPS, but requested an insecure script 'http://ajax.aspnetcdn.com/ajax/4.5.1/1/WebForms.js'. This request has been…
Carrie Chung Eng Sim
  • 3
  • 5
1 2 3
…
22 23