No mixed content detected

mixed_content

Checks for HTTP resources loaded on HTTPS pages.

What does this rule check?

Mixed content occurs when an HTTPS page loads resources (images, scripts, stylesheets) over HTTP. Modern browsers block mixed active content (scripts) and warn about mixed passive content (images).

Why is this important?

Mixed content breaks the security model of HTTPS. Browsers may block resources or show security warnings, degrading user experience and trust.

How to fix

Update all resource URLs to use HTTPS. Use protocol-relative URLs (//) or absolute HTTPS URLs.

Examples

<!-- On https://example.com -->
<img src="http://cdn.example.com/image.jpg" />
<script src="http://cdn.example.com/script.js"></script>

<!-- On https://example.com -->
<img src="https://cdn.example.com/image.jpg" />
<script src="https://cdn.example.com/script.js"></script>

Agent fix snippet

Copy this snippet and paste it into your AI coding agent to fix this issue automatically.

Fix mixed content by updating HTTP URLs to HTTPS:

Find: src="http://
Replace with: src="https://

Also check CSS url() references and <link> href attributes.