medium

Mixed Content: Insecure resource requested

HTTPS page loading resources over HTTP. Modern browsers block mixed content.

Common Causes

  1. 1Hardcoded HTTP URLs
  2. 2Third-party scripts over HTTP
  3. 3CDN not configured for HTTPS

How to Fix

Add CSP upgrade header

Content-Security-Policy: upgrade-insecure-requests

Automatically upgrades HTTP requests to HTTPS.

How ObserveOne Helps

Third-party assets are the usual source of mixed content, and they break silently when the provider changes. Monitoring the asset and API URLs your pages depend on with ObserveOne catches a vanished resource before it breaks the page.

Start Monitoring Free

Related Errors

ERR_SSL_PROTOCOL_ERROR

The browser cannot establish a secure SSL/TLS connection because the server and browser cannot agree on a protocol version or cipher suite.

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Server and browser cannot agree on SSL/TLS protocol version or cipher suite.

NET::ERR_CERT_AUTHORITY_INVALID

SSL certificate is not signed by a trusted Certificate Authority.

NET::ERR_CERT_DATE_INVALID

SSL certificate has expired or is not yet valid.

NET::ERR_CERT_COMMON_NAME_INVALID

Domain name doesn't match any domain in the SSL certificate.