Questions tagged [mixed-content-security]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
249 views

How to get rid of mixed content warning when using cookie-less domain for static content?

When I serve all website content from same domain (https://example.com), tools like pingdom keeps yelling: Serve static content from a cookieless domain When I serve static content from cookie-...
1
vote
1answer
1k views

Content-Security-Policy doesnt work on my site?

I tried this CSP: Header set Content-Security-Policy: "default-src 'self'; script-src 'self' https://www.google-analytics.com; style-src 'self' https://twemoji.maxcdn.com; img-src 'self' https://...
0
votes
1answer
79 views

WIll a HTTPS page with video player & a video served off HTTP become insecure? [duplicate]

A page is on HTTPS and all content on it is served from HTTPS, however, this page contains a video player, and once user hits a PLAY button in it, it starts playing a video, that is served from HTTP. ...
4
votes
2answers
2k views

Should I fix HTTPS mixed content for SEO reasons?

I have a website that is only available via https, but 3rd party images are only available via http. This results in a HTTPS mixed content warning. I'm thinking of proxying the image serving via an ...
4
votes
2answers
5k views

Mixed content - SSL Problem or Opencart?

This question is related with: Duplicated content www on subdomain and SSL My actual HTACCESS: RewriteBase / # this redirects example.com and www.example.com to https - thanks closetnoc @webmasters-...
2
votes
1answer
1k views

How is Facebook avoiding mixed content (SSL/non-SSL) warnings?

I signed up to Farmville and I get a URL like: https://apps.facebook.com/onthefarm/index.php?ref=tab At the bottom of the page are ads which are served not using ssl - they are pulling in regular ...
4
votes
1answer
3k views

How can mixed content compromise an entire HTTPS session?

Google Chrome is probably one of the stricter browsers out there in terms of highlighting SSL errors. Most browsers will point out when you are viewing an HTTPS page which loads insecure images/...