Browser security errors › All browsers
Mixed content: how to fix it on your website
An HTTPS page loads images, scripts or styles over plain HTTP.
What your visitors see
Browsers block insecure scripts and may show 'Not secure'. Images may upgrade or be blocked.
Common causes
- Hard-coded http:// URLs in templates or content
- Third-party embeds served over HTTP
- CMS site URL still set to http
How to fix it
- Change resource URLs to https:// or relative paths
- Search the database for http:// links after moving to HTTPS
- Add Content-Security-Policy: upgrade-insecure-requests as a safety net
Check your certificate and TLS setup
Korrali Web scans your site for certificate, TLS and security header problems and can monitor it so you hear about expiry before visitors do.