开发者

How to detect which content is not secured on mixed content SSL page.?

开发者 https://www.devze.com 2023-01-05 20:06 出处:网络
I\'ve added a SSL certificate to an existing site, and now in IE I get a mixed content warning. Problem is, I don\'t know what\'s the non-secure content IE is warning me about. It\'s a simple html pag

I've added a SSL certificate to an existing site, and now in IE I get a mixed content warning. Problem is, I don't know what's the non-secure content IE is warning me about. It's a simple html page, with a few Flash, a few images, a loaded CSS and JS.

How can I find out what's the non-secured content..?

Edit:

I found the culprit: it's the JS AC_RunActiveContent.js used to display Fla开发者_如何学JAVAsh movie. So anyone has an idea on how to prevent SSL mixed content when using AC_RunActiveContent.js.?


This means that something is requesting content using the http protocol specifically, or you have an absolute path to an image or other content that begins with http instead of https.

A few tips: Use relative paths everywhere you can. If you must use an absolute path, and it's to a server you own, use https. If you're loading stuff from off your site, you're probably stuck with the mixed-content warning.

This also goes for your scripts, check out the JS, and the CSS template and make sure they're not the guilty parties - if they are change them to use relative paths, or to request items via https instead of http (assuming you're positive that the server they're referencing supports https, if it doesn't you're stuck).

There are a few other details, this might be helpful.


Ok, so here is the solution for my particular problem. It was the codebase value in my code that needed to be https as well (I didn't think it would trigger the warning, as my Flash were displaying correctly, oh well)...

AC_FL_RunContent( 'codebase','https://download.macromedia.com/pub/shoc...

Link to Adobe info on this: Security Information error in Internet Explorer


I use the Firefox console -- it reports the http resources it blocks from fetching on a mixed content page.


Search your source for http: only. Another great tool to help you out is Fiddler with which you can see what's getting downloaded upon requesting your page.

0

精彩评论

暂无评论...
验证码 换一张
取 消

关注公众号