snag.page

Every check ยท Page contents

Mixed content

content/mixed

What it checks

Files the home page loads over http://.

Why it matters

Browsers block or warn about them, and they can be changed in transit.

How to fix it

  1. Change each http:// address in the page to https://, or make it relative.
  2. Meanwhile, the header below has browsers upgrade them.
Header
Content-Security-Policy: upgrade-insecure-requests

Check a site for this and everything else: snag.page. More on page contents: Forms over HTTPS Libraries with known flaws Integrity on CDN files Generator tag Script hosts