DISPLAYING HTTP CONTENT IN HTTPS PAGES

May 10, 2016   /   by Marco  / Categories :  Technology, website, Websites

This week we had to look at an issue with displaying HTTP (insecure) content in a HTTPS (secure) page. According to a number of sites, different browsers by default don’t allow this as the HTTPS page is secure and displaying non-secure content is a no-no. This is called displaying MIXED CONTENT.

The error message you would see in the browsers developer console would be something like:

Mixed Content The page at https://website was loaded over HTTPS but requested an image http://website/image.gif This content should also be served over HTTPS.

The recommended solution is to make sure that all the HTTP content is changed to HTTPS so that everything on the HTTPS page is encrypted. This is a very tedious task. The way I solved this issue was to include a special meta tag at the header of the page to upgrade all HTTP links to HTTPS automatically.

The one I used was:

<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">
DISPLAYING HTTP CONTENT IN HTTPS PAGES

DISPLAYING HTTP CONTENT IN HTTPS PAGES

DO YOU LIKE WHAT YOU'VE READ?
Join our subscription list and receive our content right in your mailbox. If you like to receive some Great deals our Freebies then subscribe now!

Our Sponsors

  • Follow us:

OTHER ARTICLES YOU MAY LIKE


SUPABASE BACKUP TUTORIAL: USE DBEAVER TO EXPORT YOUR DATABASE SAFELY

SUPABASE BACKUP TUTORIAL: USE DBEAVER TO EXPORT YOUR DATABASE SAFELY

If you are building anything serious on Supabase, whether that is a client portal, a SaaS app, an internal dashboard, or even a small side project that is starting to get traction, having a reliable database backup process is one of those tasks that quickly moves from optional to essential. Supabase makes a lot of […]

read more
USE FUSEBASE TO AUTOMATE TEAMWORK AND COLLABORATION

USE FUSEBASE TO AUTOMATE TEAMWORK AND COLLABORATION

If your business is growing, your team is juggling too many moving parts, and your client communication is spread across email threads, chat apps, documents, task boards, and endless follow ups, there is a good chance the real problem is not effort but fragmentation. Most businesses do not lose time because people are lazy. They […]

read more

Like our Page