mixed-content

Possible to allow HTTP requests from HTTPS website?

被刻印的时光 ゝ 提交于 2019-12-01 04:50:06
问题 I have installed a (non wildcard) SSL certificate so my website can use HTTPS. When I try to request resources from HTTP urls I get error-message like: Mixed Content: The page at 'https://example.com/' was loaded over HTTPS, but requested an insecure stylesheet 'http://resources.example.com/style.css'. This request has been blocked; the content must be served over HTTPS. I get that it probably is a bad practice according to all kinds of opinions people might have when it comes to mix http and

https Mixed Content errors

久未见 提交于 2019-11-30 18:38:25
问题 We're getting allot of Mixed Content errors on the cart page of our Magento Store Mixed Content: The page at 'https://www.magento.com/onestepcheckout/index/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Lato:400,300,700,900'. This request has been blocked; the content must be served over HTTPS. I can see the google font file is being called in the head section of our theme via http <link href='http://fonts.googleapis.com/css?family=PT

How can I allow Mixed contents (http with https) using content-security-policy meta tag?

对着背影说爱祢 提交于 2019-11-30 07:08:15
问题 I'm forcing https to access my website, but some of the contents must be loaded over http (for example video contents can not be over https), but the browsers block the request because of mixed-contents policy. After hours of searching I found that I can use Content-Security-Policy but I have no idea how to allow mixed contents with it. <meta http-equiv="Content-Security-Policy" content="????"> 回答1: You can't. CSP is there to restrict content on your website, not to loosen browser

Safari 9 disallowed running of insecure content?

可紊 提交于 2019-11-30 01:58:16
after upgrading to Safari 9 I'm getting this error in the browser: [Warning] [blocked] The page at https://localhost:8443/login was not allowed to run insecure content from http://localhost:8080/assets/static/script.js. Anyone knows how to enable the running of insecure content on the new Safari? According to the Apple support forums Safari does not allow you to disable the block on mixed content. Though this is frustrating for usability in legitimate cases like yours, it seems to be part of their effort to force secure content serving / content serving best practices. As a solution for you

Safari 9 disallowed running of insecure content?

Deadly 提交于 2019-11-28 20:59:14
问题 after upgrading to Safari 9 I'm getting this error in the browser: [Warning] [blocked] The page at https://localhost:8443/login was not allowed to run insecure content from http://localhost:8080/assets/static/script.js. Anyone knows how to enable the running of insecure content on the new Safari? 回答1: According to the Apple support forums Safari does not allow you to disable the block on mixed content. Though this is frustrating for usability in legitimate cases like yours, it seems to be

Mixed content in Chrome and IE

孤街浪徒 提交于 2019-11-28 05:20:32
In my HTTPS enabled site I have added an iframe that should show content from my other site, but it is not working under https. <iframe src="//myothersite.com"></iframe> In Firefox latest version everything works good. In Chrome, the iframe isn't loaded and in the console I see these two errors Mixed Content: The page at 'https://mysite' was loaded over HTTPS, but requested an insecure resource 'http://myothersite.com'. This request has been blocked; the content must be served over HTTPS. Failed to load resource: net::ERR_CACHE_MISS In IE content load incorrectly and I see an alert message; if

Mixed Content/Insecure Content SSL

无人久伴 提交于 2019-11-27 15:23:38
I am currently having issues with the following Mixed Content: The page at 'https://www.example.com/' was loaded over HTTPS, but requested an insecure stylesheet This is a Wordpress website on a Centos server with httpd installed. I have following virtual host setup in `http.conf: NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:443> DocumentRoot /var/www/html/example ServerName www.example.com ServerAlias example.com SSLEngine on SSLCACertificateFile /etc/httpd/conf/ssl.crt/intermediate.crt SSLCertificateFile /etc/httpd/conf/ssl.crt/server.crt SSLCertificateKeyFile /etc/httpd/conf

Mixed content in Chrome and IE

こ雲淡風輕ζ 提交于 2019-11-27 00:53:39
问题 In my HTTPS enabled site I have added an iframe that should show content from my other site, but it is not working under https. <iframe src="//myothersite.com"></iframe> In Firefox latest version everything works good. In Chrome, the iframe isn't loaded and in the console I see these two errors Mixed Content: The page at 'https://mysite' was loaded over HTTPS, but requested an insecure resource 'http://myothersite.com'. This request has been blocked; the content must be served over HTTPS.

Mixed Content/Insecure Content SSL

℡╲_俬逩灬. 提交于 2019-11-26 18:30:04
问题 I am currently having issues with the following Mixed Content: The page at 'https://www.example.com/' was loaded over HTTPS, but requested an insecure stylesheet This is a Wordpress website on a Centos server with httpd installed. I have following virtual host setup in `http.conf: NameVirtualHost *:80 NameVirtualHost *:443 <VirtualHost *:443> DocumentRoot /var/www/html/example ServerName www.example.com ServerAlias example.com SSLEngine on SSLCACertificateFile /etc/httpd/conf/ssl.crt

Why am I suddenly getting a “Blocked loading mixed active content” issue in Firefox?

北慕城南 提交于 2019-11-25 22:49:27
问题 This morning, upon upgrading my Firefox browser to the latest version (from 22 to 23), some of the key aspects of my back office (website) stopped working. Looking at the Firebug log, the following errors were being reported: Blocked loading mixed active content \"http://code.jquery.com/ui/1.8.10/themes/smoothness/jquery-ui.css\" Blocked loading mixed active content \"http://ajax.aspnetcdn.com/ajax/jquery.ui/1.8.10/jquery-ui.min.js\"` among other errors caused by the latter of the two above