Mixed content issue for HTTP rel="next" links in Firefox
See original GitHub issueIssue Summary:
Firefox treats HTTP rel=“next” links as “mixed content”, blocks those and displays a yellow triangle on the green padlock in front of the URL.
Steps to Reproduce:
- In Firefox, visit https://hannah.wf/
- Notice that there is a yellow triangle on the green padlock due to mixed content.
- Press Shift+F5 to open developer tools. Click on “Console”. The following is shown:
Blocked loading mixed active content "http://hannah.wf/page/2/"
- View page source and notice this line:
<link rel="next" href="http://hannah.wf/page/2/" />
Expected result:
Green padlock only.
Actual result:
Green padlock with yellow triangle.
Technical details:
Platforms where the issue observed:
- Ghost Version: 0.7
- Browser: Firefox Version 43
Issue Analytics
- State:
- Created 8 years ago
- Comments:16 (14 by maintainers)
Top Results From Across the Web
Mixed content blocking in Firefox - Mozilla Support
Firefox automatically blocks insecure or mixed content from secure web pages. We'll explain what that means and what options you have.
Read more >How to fix a website with blocked mixed content - Web security
Starting with Firefox 23, Firefox blocks active mixed content by default. This follows a practice adopted by Internet Explorer (since ...
Read more >Mixed content - Web security - MDN Web Docs - Mozilla
The Firefox Web Console displays a mixed content warning message in the Net pane when a page on your website has this issue....
Read more >How can I detect mixed content on my site | Firefox Support ...
our drupal-website https://tweetakt.be keeps giving warnings as containing 'mixed content' on Firefox. We have screened it over and over. Is ...
Read more >I do not get the option to disable blocking of mixed content ...
It works just fine using the Chrome Browser. No problems until the latest Win 10 Creator update and the latest Firefox update. I...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
@hwdsl2 - a work around is to set the blog url to use SSL. E.g https://www.example.com in config.js - if you use nginx and get stuck in a loop add proxy_set_header X-Forwarded-Proto $scheme; to your location configuration. It does force your entire site over HTTPS mind, depends what you are after but does stop the mixed content issue for now.
👍