'已阻止''X'处的页面是通过HTTPS加载的，但运行了不安全的内容

Question

How I can fix this block if everything happen inside of my domain?

[blocked] The page at ' https://example.com/secure/CMS/Edit/Default.aspx ' was loaded over HTTPS, but ran insecure content from ' http://example.com/en/?idkeep=True&DE_VM=4&DE_LNK=183_185790&DE_RND=536512159&id=183_185790 ': this content should also be loaded over HTTPS.

This happen in the CMS called EPiServer 6.

Answer 1

I was getting this problem. I removed "http:" prefix from that link.

old : iframe src=" http://example.com " >

new : iframe src=" //example.com " >

Now it's working perfect. Thank you.

Answer 2

You can not put insecure (http not https) content (images, stylesheets, inline frames, etc.) on a secure webpage (https). browser will block the insecure element while loading the page.

Search where in your script (https :// example.com/secure/CMS/Edit/Default.aspx) trying to access (http :// example.com/en/?idkeep=True&DE_VM=4&DE_LNK=183_185790&DE_RND=536512159&id=183_18579) and just add 'S' after http.

in other words your page should try to access http**S**://example.com/en/ not (http:// example.com /en/)

But I know, if the requested page is not available on HTTPS, there is nothing more you can do :-S

Answer 3

Because I get this project in the meddle without any other developer I will know, this server has a reverse-inverse-proxy. Than without any code the server change the protocol.

But to fix or minimize this problem I ensure all scripts are assigned with relative protocol. Removing http[s]:// and leave just //

Answer 4

我们通过将链接属性设置为在新选项卡中打开而不尝试在安全页面上的框架中显示不安全页面来解决此问题。