Questions tagged [mixed-content]

HTTPS page that includes content retrieved through cleartext HTTP

Mixed content occurs when a document served over HTTPS contains content retrieved through cleartext HTTP. That makes the connection only partially encrypted and vulnerable to man-in-the-middle attacks. Therefore, browsers block such mixed content.

https://w3c.github.io/webappsec-mixed-content/ defines the relevant requirements for browsers.

335 questions
0
votes
2 answers

Angular HTTP request blocked - Showing mixed content

Angular HTTP request is blocked - Showing mixed content. But when i'm accessing through browser URL, the content is showing. The angular code is: $http.post('http://crms.ttteamthoi.in/get_timespent_br', { 'from':…
Husni Abdul Nazer
  • 103
  • 1
  • 1
  • 12
0
votes
1 answer

Mixed content blocking in chrome cast receiver app

I am trying to play a DRM protected content using Chromecast custom receiver. I am following this doc https://developers.google.com/cast/docs/custom_receiver. But it is not working for me. It gives the following error log. Mixed Content: The page at…
Anna
  • 973
  • 4
  • 13
  • 26
0
votes
2 answers

insecure image breaking the green SSL bar

I have some image links on my website that causes to show green SSL certificate to gray. The error is This content should also be served over HTTPS. 2jquery.min.js:5 Mixed Content: The page at 'https://mywebsite.com/' was loaded over HTTPS, …
Fury
  • 4,643
  • 5
  • 50
  • 80
0
votes
1 answer

Angular returning status code 0 instead of 302

Angular has its own status code 0 for failed request. I am trying to make API call on keeping my app open for 30-40 minutes. When i make a call the API request hits the server and it redirects to the login page hosted by other application.When I…
Nutan
  • 1,478
  • 3
  • 12
  • 19
0
votes
1 answer

HTTP images over HTTPS using angularjs

whenever I visit my angularjs based website that loads images (http images on a https server) I get warnings in the console saying that mixed content has been blocked. And those images do not show up It is not my browser because it happens on other…
Janosch Hübner
  • 1,584
  • 25
  • 44
0
votes
1 answer

Dailymotion "broke" HTTPS with video thumbnail (Chrome warning)

I have an embed dailymotion video inside a web page. I use the code below to display it. This code call the preview picture of the video through HTTP instead of HTTPS whereas web page domain is on HTTPS. API call is well sent with HTTPS protocol :…
Cédric
  • 401
  • 3
  • 9
0
votes
1 answer

magento mixed content after ssl installed

I recently installed a godaddy ssl certificate on my magento site. My home page loads fine with no mixed content. However, all the links in the navigation menu are being generated as http:// and the cart page has mixed content warnings. My config…
user3403792
  • 21
  • 1
  • 5
0
votes
1 answer

Play framework 2.3.8 mixed content in production mode

I'm running an application in prod mode, getting multiple "mixed content" warnings since scripts are apparently requested trough unsecure http. Of course in dev mode this is not an issue. Allowing the browser to access mixed content (https and…
Dario
  • 255
  • 1
  • 10
0
votes
1 answer

Mixed content SSL Error

I recently installed an SSL Certificate onto my hosting for my website (just a standard site). It's installed perfectly and I have updated my .htaccess file to force it for users with the following code: RewriteEngine On RewriteCond…
bruceec
  • 1
  • 1
0
votes
0 answers

Problems with Mixed content: an insecure script requested

I have problems with setting up goals in Google Analytics. There are a few bugs in the order page, which I think are causing the problem. With the help of GA debug extention I managed to reach the following errors (5) and warnings (4): (Here are…
0
votes
1 answer

Google Maps loaded using API into iframe not displaying in IE

I'm working on an iframe that displays a Google map using the maps API. The iframe is delivered using https as is the Google map. Everything displays correctly in Chrome, Firefox and Safari. However in IE, the map doesn't load. IE is throwing the…
Jonathan
  • 323
  • 2
  • 11
0
votes
3 answers

Solution for mixed content blocking

Our product has a collection of sites and the main page contain 3 iframes which loads these different web sites. We are going to enable SSL on all the site. We allow html user data to be displayed in our systems. Currently we put this on hold since…
Eranga
  • 32,181
  • 5
  • 97
  • 96
0
votes
1 answer

Mixed Content Issue

Currently I am working in software Development Company where we have an eLearning System. Product has collection of sites and main page contain 3 iframes which loads different web sites. We are going to enable SSL on the site in order all sites.…
0
votes
1 answer

For Chrome extension, I get error when calling http site from https site

Get error: Mixed Content: The page at 'https:xxx' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://127.0.0.1/xxx'. This request has been blocked; the content must be served over HTTPS. and Uncaught NetworkError:…
0
votes
1 answer

Parse.com Mixed Content Error

I'm creating a web application using parse and have found that in order for a user to authenticate I need to make all requests using HTTPS. I'm able to switch this over and get it to work correctly, but when I do I get all kinds of mixed content…
James Parker
  • 2,095
  • 3
  • 27
  • 48