[wp-trac] [WordPress Trac] #43433: mixed-content for install page stylesheets

Wed Feb 28 11:29:34 UTC 2018

#43433: mixed-content for install page stylesheets
-------------------------------+------------------------------
 Reporter:  mimke              |       Owner:
     Type:  defect (bug)       |      Status:  new
 Priority:  normal             |   Milestone:  Awaiting Review
Component:  Administration     |     Version:  4.9.1
 Severity:  normal             |  Resolution:
 Keywords:  reporter-feedback  |     Focuses:
-------------------------------+------------------------------

Comment (by mimke):

 chrome developer console:
 {{{
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure stylesheet '<URL>'. This request has been blocked; the content
 must be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure stylesheet '<URL>'. This request has been blocked; the content
 must be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure stylesheet '<URL>'. This request has been blocked; the content
 must be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure stylesheet '<URL>'. This request has been blocked; the content
 must be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure stylesheet '<URL>'. This request has been blocked; the content
 must be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure stylesheet '<URL>'. This request has been blocked; the content
 must be served over HTTPS.
 install.php:8 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 stylesheet 'http://www.example.com/blog/wp-
 includes/css/buttons.min.css?ver=4.9.4'. This request has been blocked;
 the content must be served over HTTPS.
 install.php:9 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 stylesheet 'http://www.example.com/blog/wp-
 admin/css/install.min.css?ver=4.9.4'. This request has been blocked; the
 content must be served over HTTPS.
 install.php:10 Mixed Content: The page at 'https://www.example.com/blog
 /wp-admin/install.php?step=1' was loaded over HTTPS, but requested an
 insecure stylesheet 'http://www.example.com/blog/wp-
 includes/css/dashicons.min.css?ver=4.9.4'. This request has been blocked;
 the content must be served over HTTPS.
 install.php:1 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 stylesheet 'http://www.example.com/blog/wp-
 includes/css/buttons.min.css?ver=4.9.4'. This request has been blocked;
 the content must be served over HTTPS.
 install.php:1 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 stylesheet 'http://www.example.com/blog/wp-
 admin/css/install.min.css?ver=4.9.4'. This request has been blocked; the
 content must be served over HTTPS.
 install.php:1 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 stylesheet 'http://www.example.com/blog/wp-
 includes/css/dashicons.min.css?ver=4.9.4'. This request has been blocked;
 the content must be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure script '<URL>'. This request has been blocked; the content must
 be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure script '<URL>'. This request has been blocked; the content must
 be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure script '<URL>'. This request has been blocked; the content must
 be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure script '<URL>'. This request has been blocked; the content must
 be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure script '<URL>'. This request has been blocked; the content must
 be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure script '<URL>'. This request has been blocked; the content must
 be served over HTTPS.
 Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an
 insecure script '<URL>'. This request has been blocked; the content must
 be served over HTTPS.
 install.php:1 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 script 'http://www.example.com/blog/wp-
 includes/js/jquery/jquery.js?ver=1.12.4'. This request has been blocked;
 the content must be served over HTTPS.
 install.php:1 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 script 'http://www.example.com/blog/wp-includes/js/jquery/jquery-
 migrate.min.js?ver=1.4.1'. This request has been blocked; the content must
 be served over HTTPS.
 install.php:1 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 script 'http://www.example.com/blog/wp-includes/js/zxcvbn-
 async.min.js?ver=1.0'. This request has been blocked; the content must be
 served over HTTPS.
 install.php:1 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 script 'http://www.example.com/blog/wp-admin/js/password-strength-
 meter.min.js?ver=4.9.4'. This request has been blocked; the content must
 be served over HTTPS.
 install.php:1 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 script 'http://www.example.com/blog/wp-
 includes/js/underscore.min.js?ver=1.8.3'. This request has been blocked;
 the content must be served over HTTPS.
 install.php:1 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 script 'http://www.example.com/blog/wp-includes/js/wp-
 util.min.js?ver=4.9.4'. This request has been blocked; the content must be
 served over HTTPS.
 install.php:1 Mixed Content: The page at 'https://www.example.com/blog/wp-
 admin/install.php?step=1' was loaded over HTTPS, but requested an insecure
 script 'http://www.example.com/blog/wp-admin/js/user-
 profile.min.js?ver=4.9.4'. This request has been blocked; the content must
 be served over HTTPS.
 install.php:119 Uncaught ReferenceError: jQuery is not defined
     at install.php:119
 }}}

 my site is on self hosted vps behind '''haproxy''' and I redirect http to
 https with following configuration in haproxy :

 {{{
 redirect scheme https code 301 if !{ ssl_fc }
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/43433#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform