Questions tagged [mixed-content]

HTTPS page that includes content retrieved through cleartext HTTP

Mixed content occurs when a document served over HTTPS contains content retrieved through cleartext HTTP. That makes the connection only partially encrypted and vulnerable to man-in-the-middle attacks. Therefore, browsers block such mixed content.

https://w3c.github.io/webappsec-mixed-content/ defines the relevant requirements for browsers.

335 questions
5
votes
0 answers

YUI library on HTTPS

My webapp uses YUI library exactly as recommended in the doc: PROBLEM: Modern browsers do not load it anymore, citing mixed HTTPS/HTTP concerns. Replacing http with…
Nicolas Raoul
  • 58,567
  • 58
  • 222
  • 373
5
votes
1 answer

Possible to allow HTTP requests from HTTPS website?

I have installed a (non wildcard) SSL certificate so my website can use HTTPS. When I try to request resources from HTTP urls I get error-message like: Mixed Content: The page at 'https://example.com/' was loaded over HTTPS, but requested an…
Adrian Rosca
  • 6,922
  • 9
  • 40
  • 57
4
votes
2 answers

Mixed-content warning from Chrome 87 when accessing HTTP image source from an HTTPS page

We have an in-house (.Net) application that runs on our corporate desktops. It runs a small web server listening on for HTTP requests on a specific port on localhost. We have a separate HTTPS website that communicates with this application by…
KenD
  • 5,280
  • 7
  • 48
  • 85
4
votes
0 answers

Failed to construct websocket

When running the application on the browser I saw this error in the console. I have dockerized my application and using nginx proxy for https. I know it is asking me to open the ports 53703, but I am not getting where to open the ports in aws or in…
Aditya
  • 2,358
  • 6
  • 35
  • 61
4
votes
1 answer

Got SSL, now all requested files are blocked (mixed content)

I have clients who use HTML on their pages, that I provide. That HTML links to files on my server (JS, CSS, images, etc).Example of what I give them: I just got an SSL,…
chris
  • 577
  • 1
  • 9
  • 23
4
votes
1 answer

Google Maps, HTTP in China and Mixed Content Error

I'm displaying Google maps in China, the API there uses HTTP. However, my website is HTTPS. Chrome, and any other mainstream browser throws a Mixed Content error. How do I overcome this?
tt_Gantz
  • 2,786
  • 3
  • 23
  • 43
4
votes
2 answers

Why bootstrap isn't working in my github webpage?

I created a webpage and have it linked to cnd bootstrap extenstion but when I launched the webpage , my layout looks all plain and spread out. here is the link to the site kellito14.github.io here is the code below:
user3261680
  • 91
  • 2
  • 11
4
votes
0 answers

Facbeook app with form posting from HTTPS to HTTP

I have a facebook app that is basically an iframe of my website. My website runs on HTTPS and has a form that has a POST action to /list-items. On the server, it renders a page that on the jQuery's $(document).ready() make an AJAX call to populate a…
Gabriel F
  • 161
  • 5
4
votes
1 answer

Wordpress Mixed Content Error (google font related)

I've searched the forums, but I cannot figure out exactly how to fix the mixed content error on my site to make it https. Here is the error from chrome: Mixed Content: The page at https://www.example.com/ was loaded over HTTPS, but requested an…
BizBrar
  • 57
  • 1
  • 1
  • 8
4
votes
2 answers

iframe blocked as insecure content, even though the iframe is HTTPS

I am trying to embed an iframe (containing shellinabox, if that's relevant) onto an HTTPS webpage. The HTML I'm using to embed the iframe is pretty straightforward:
tlng05
  • 141
  • 2
  • 6
3
votes
1 answer

How to make a HTTP request to a LocalNetwork from a HTTPS WebSite?

let's assume that there is a website under HTTPS, in that WebSite the user can set the IP of a local machine (thermal printer in this case). How can the user print something on that printer by using the website from his device? The user have to use…
NiceToMytyuk
  • 3,644
  • 3
  • 39
  • 100
3
votes
0 answers

Mixed-Content Warning; Favicon blocked & culprit, but I don't have it specified

I have a simple web page with some jQuery ajax and PHP backside to easily view the error_log quickly and erase it for debugging and development purposes. However, I noticed in FireFox that I have a mixed-content warning. I checked on Chrome and it…
Dawson Irvine
  • 322
  • 4
  • 19
3
votes
1 answer

Mixed Content, This request has been blocked; the content must be served over HTTPS , Laravel

I have this error one production env. only on some routes, I see no difference between the routes that works and the few of them that don't work. All my routes are in web.php, and in front I try to access via Vuejs/Axios. Also, the both url from…
Beusebiu
  • 1,433
  • 4
  • 23
  • 68
3
votes
1 answer

How to convert a HTTP stream to HTTPS?

My website is running via HTTPS at a public hoster and connects to a node server that is running on a Raspberry PI. There is also a piece of hardware (lets call it decoder) in the same network with the PI which sends a data stream via TCP. The…
Lars
  • 920
  • 1
  • 14
  • 34
3
votes
2 answers

Mixed content warning for insecure resources from Odoo

I am running Odoo and would like to add some caching mechanism. In order to do so, I simply added a service worker and the following rout: workbox.routing.registerNavigationRoute( '/web/', workbox.strategies.staleWhileRevalidate(), ); Unfortunately…
user3122136
  • 161
  • 4
  • 15
1 2
3
22 23