This week we had to look at an issue with displaying HTTP (insecure) content in a HTTPS (secure) page. According to a number of sites, different browsers by default don’t allow this as the HTTPS page is secure and displaying non-secure content is a no-no. This is called displaying MIXED CONTENT.
The error message you would see in the browsers developer console would be something like:
Mixed Content The page at https://website was loaded over HTTPS but requested an image http://website/image.gif This content should also be served over HTTPS.
The recommended solution is to make sure that all the HTTP content is changed to HTTPS so that everything on the HTTPS page is encrypted. This is a very tedious task. The way I solved this issue was to include a special meta tag at the header of the page to upgrade all HTTP links to HTTPS automatically.
The one I used was:
<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
Get Weekly Software Intelligence & Exclusive Deals
Join our private dispatch to receive curated lifetime SaaS discounts, developer automation blueprints, and actionable growth tutorials straight to your inbox.
Our Featured Sponsors & Partners
Discover vetted software platforms, SaaS toolkits, and services supporting the Business Legions community.


