FALKEN'S MAZE / CHECKS / MIXED CONTENT
Mixed content
What Joshua checks
Looks for scripts, stylesheets, frames and images loaded over plain HTTP on the HTTPS home page.
Why it matters
Browsers block insecure scripts and stylesheets, breaking the page, and mark the page as not secure for insecure images.
How to fix it
Change http:// addresses in the page to https://, or send "Content-Security-Policy: upgrade-insecure-requests".
In the Maze Score
- Worth
- 5 points (half for a warning)
- Severity
- Medium
- Runs on
- Every scan, including the free report card
Related checks
- Certificate validityFree
- Certificate expiryFree
- Legacy TLS versionsFree
- HSTSFree
- HTTP redirects to HTTPSFree
- Cipher suitesPro (Watchtower)
How does your domain do? Scan it free and get a Maze Score in about a minute.