8

This post, when viewed in HTTPS, is triggering security warnings:

Using Firefox, I got the classical yellow triangle warning in the address bar, caused by this img tag with absolute URI source in HTTP:

<img alt="Snowden pulling blanket over his head" src="http://i.stack.imgur.com/bDeLe.png">

In Chrome, I got the grey shield warning and this error in console:

Mixed Content: The page at 'In CitizenFour, what was Edward Snowden mitigating with a head blanket?' was loaded over HTTPS, but requested an insecure script 'http://stackexchange.com/ads/beta-question/js?id=beta-ad-container'. This request has been blocked; the content must be served over HTTPS.

Including HTTP resources in a page served in HTTPS is generally considered an issue https://developer.mozilla.org/en-US/docs/Security/MixedContent/How_to_fix_website_with_mixed_content

Should that be fixed?

3
  • 1
    it can be, just propose an edit to the post, replacing the "http" by "https" - it's supported but the default values are bad because SE doesn't default to https (and thus doesn't enforce https'ing share links and imgur embedded links).
    – SEJPM
    Jan 15, 2016 at 20:47
  • 1
    @SEJPM right. I can't change less than 6 chars though, so I left a comment ansking the poster to do so. Then, we'll still have the other issue with the ads js.
    – Mario Trucco
    Jan 16, 2016 at 10:41
  • @MarioTrucco You can add this to the body: <!-- comment to make this long enough to edit --> It will not show up in the post.
    – Mark Buffalo
    Feb 29, 2016 at 15:32

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .