English 中文(简体)
See what content is not sent over HTTPS
原标题:

I created a page that is HTTPS only. On my browsers, I always get a warning that the page includes resources that are not secured. I just can t find out why! Looking at the source code seems fine. All img src and javascript tags are using relative path (/images/...). It does not consider href links as resources does it?

Is there a way to know what actually is the source of that problem?

最佳回答

I guess you could use the Net tab of Firebug to see that.

alt text
(source: ibm.com)

问题回答

Try capturing all your traffic using Fiddler - it will help you identify any extraneous HTTP calls easily.

It s unlikely to be a hyperlink, but could it be a stylesheet? They re linked using the href attribute as well:

<link rel="stylesheet" href="...">

Also, how about stylesheets/Javascript that import other resources (other stylesheets, Ajax libraries, etc.)?

Edit: the image at https://www.makemeheal.com/classifieds/images/1.0/dline_hmpmid1px.gif seems to be redirecting to a non-https version of its URL; the other images are under https://www.makemeheal.com/images/ which doesn t do that. Looks like a webserver config issue?

The easiest way is usually to look through the source (with the Find utility in your editor) for http:.

It is often part of some code that calls some Flash.

I guess you include some content that links to http. Try a search in the source on http://, ftp:// or anything alike. Also take a look at forms. Forms can also post to http by accident.

Is it possible to put the website online somewhere so we can take a look?

Perhaps you include a style sheet that refers to some image which is without ssl, or you reference some js which in turn references some other content over http?

Do you have any background images in your CSS that are referenced absolutely? Also, what about any iframe tags on the page with the src attribute set to an unsecure page?

+1 for using Fiddler.

One very quick check you can make is to only get the HTTPS content when prompted, and then see what is missing from your page once it is loaded. If is is a resource file, or a css file, or some javascript, or an image, then you will spot that virtually straight away.





相关问题
CSS working only in Firefox

I am trying to create a search text-field like on the Apple website. The HTML looks like this: <div class="frm-search"> <div> <input class="btn" type="image" src="http://www....

image changed but appears the same in browser

I m writing a php script to crop an image. The script overwrites the old image with the new one, but when I reload the page (which is supposed to pickup the new image) I still see the old one. ...

Firefox background image horizontal centering oddity

I am building some basic HTML code for a CMS. One of the page-related options in the CMS is "background image" and "stretch page width / height to background image width / height." so that with large ...

Separator line in ASP.NET

I d like to add a simple separator line in an aspx web form. Does anyone know how? It sounds easy enough, but still I can t manage to find how to do it.. 10x!

热门标签