question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Ghost Admin:favicon.ico content should also be served over HTTPS.

See original GitHub issue

Welcome to Ghost’s GitHub repo! 👋🎉

Issue Summary

Mixed Content: The page at ‘https://xxx.org/ghost/’ was loaded over HTTPS, but requested an insecure image ‘http://xxx.org/favicon.ico?t=1508400300xxx’. This content should also be served over HTTPS.

https://github.com/TryGhost/Ghost/issues/8571

This issue in 1.14.1 need reopen, ghost admin error.

Error in line 7762 with assets/vendor.min-87477a1d2baf934c445571d66b0baed9.js

In template files, exist favicon html code, do not use vendor.min.js to request again. /ghost/core/server/admin/views/default.html /ghost/core/server/admin/views/default-prod.html


Ghost do not host static files for path / without nginx or any another http proxy program.

Please add static files hosting function and custom host path, i think install node only is enough, not need nginx.

Technical details:

  • Ghost Version: 1.14.1

Issue Analytics

  • State:closed
  • Created 6 years ago
  • Comments:7 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
zackifycommented, Dec 6, 2017

I’m serving my ghost over https (url is https) and it all works great, yet the favicon in admin panel is still being requested over http.

image

config:

  "url": "https://blah.io/blog/",
  "admin": {
    "url": "https://blah.io/blog/"
  },
0reactions
zackifycommented, Dec 6, 2017

Yes, I’m using the latest docker image and recreated it with that config.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Images appearing in preview but not in published article
Your admin panel should always be loaded over https. Ghost CLI does all this for you. We will eventually deprecate using http completely...
Read more >
How to fix "insecure content was loaded over HTTPS, but ...
Note: This is a hot fix when you update your production from non-ssl to ssl, anyway you have to fix all the links...
Read more >
Move WordPress from HTTP to HTTPS - Hide My WP Ghost
If a server is pretending to be on HTTPS, and its certificate doesn't match, then most modern browsers will warn the user from...
Read more >
SSL mixed content warning - favicon.ico on admin sidebar
Love the plugin, but one of the two icons in the admin navigation are not being pulled in via https. I searched the...
Read more >
Ghost Themes as Progressive Web Apps
Service Worker; manifest file. Secure contexts (HTTPS). The application must be served over a secure network connection. Ghost comes with ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found