Skip to main content
Checks for HTTP resources on HTTPS pages
Rule IDsecurity/mixed-content
CategorySecurity
ScopePer-page
Severityerror
Weight7/10

​
Solution

Mixed content occurs when an HTTPS page loads resources over HTTP, breaking the security chain. Browsers may block these resources. Update all resource URLs to use HTTPS or protocol-relative URLs (//example.com). Check images, scripts, stylesheets, fonts, and iframes. Use Content-Security-Policy: upgrade-insecure-requests to automatically upgrade HTTP to HTTPS.

​
Enable / Disable

​
Disable this rule

squirrel.toml
[rules]
disable = ["security/mixed-content"]

​
Disable all Security rules

squirrel.toml
[rules]
disable = ["security/*"]

​
Enable only this rule

squirrel.toml
[rules]
enable = ["security/mixed-content"]
disable = ["*"]