question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

https: Mixed content

See original GitHub issue

hi, I pass my docker-lizmap in https (with nginx-proxy and let’s encrypt): I saw that the logo_footer.png goes in http and not in https. So I get mixed content and therefore an unsafe connection.

I solved the problem by commenting on logo_footer.png in ./lizmap/modules/view/templates/map.tpl and ./lizmap/modules/view/templates/main.tpl

<!--      {image $j_themepath.'css/img/logo_footer.png'} -->

I have not yet found where is this variable http ???

I also saw that the “OSM Stamen Toner” also goes into http while OSM is well in https

Issue Analytics

  • State:closed
  • Created 6 years ago
  • Comments:13

github_iconTop GitHub Comments

0reactions
laurentjcommented, Feb 14, 2018

In Lizmap 3.0.18 and 3.1.6 you can fix this issue by setting the parameter forceProxyProtocol in your localconfig.ini.php, if lizmap is accessible behind an https reverse proxy.

forceProxyProtocol=https

It says that the public access of the reverse proxy is in https, so Lizmap/Jelix will generate url with https://.

Reminder: if you want to change settings in mainconfig.ini.php, set new values into localconfig.ini.php. Do not change anything in mainconfig.ini.php 😉

Read more comments on GitHub >

github_iconTop Results From Across the Web

Mixed content - Web security - MDN Web Docs - Mozilla
Mixed passive/display content is content served over HTTP that is included in an HTTPS webpage, but that cannot alter other portions of the ......
Read more >
What is mixed content? - web.dev
Mixed content occurs when initial HTML is loaded over a secure HTTPS connection, but other resources (such as images, videos, stylesheets, ...
Read more >
Mixed Content - The HTTPS-Only Standard
When an HTTPS website references insecure (HTTP) resources, this is called mixed content. Browsers prevent an HTTPS website from loading most insecure ...
Read more >
What is mixed content? | HTTP vs. HTTPS - Cloudflare
Mixed content, or HTTP over HTTPS, occurs when sites with TLS encryption contain elements loaded over the unsecure HTTP protocol. Learn how to...
Read more >
How to Quickly Fix Mixed Content Warnings (HTTPS/SSL)
A mixed content warning appears in a user's browser when the site they're trying to visit is loading HTTPS and HTTP scripts or...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found