Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint '<URL>'. This request has been blocked; the content must be served over HTTPS.

Hello, my socket client page (client.html) wors when my domain did not have a ssl. but if I installed ssl with Let’s Encrypt on plesk (windows) when the client.html does not work. Error code : Mixed Content: The page at ‘<URL>’ was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint ‘<URL>’. This request has been blocked; the content must be served over HTTPS.

what should I do ?

javascript code:

var socket = io('http://socket.domain.com:2020');

… SHORTLY : No SSL http://socket.domain.com/client.html

var socket = io('http://socket.domain.com:2020');

it is work

Domain has a SSL ( Let’s Encrypt ) http(s)😕/socket.domain.com/client.html

var socket = io('http://socket.domain.com:2020');

it is not work

You can look all screenshot

[Code-Warlock]

I had a similar issue making a request to an endpoint in JS, I solved the error by adding the meta tag below… I found it on stack overflow <meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests" /> I hope it helps 😃

[michachan]

I recommend using a Nginx reverse proxy to have the port accessible from a url path, and then have the base domain covered by a HTTPS certificate. Essentially, socket.domain.com:80 is the reverse proxy and directs the requests to :2020.