Community Tip - Fixing mixed content errors

Error
Try the suggestions in this Community Tip to help you fix mixed content errors.

Background
Did you notice the green padlock :lock: missing from your browser when connecting over HTTPS? That is likely a mixed content issue. Mixed content errors mean that your website is being loaded over HTTPS, but some of the resources are being loaded over HTTP. In this case, the site will show as not secure.

Registrar, basically free

Quick Fix Ideas

  1. To fix this, you will need to edit your source code and change all resources to load over a relative path, or directly over HTTPS. For example, if you load your images with a full URL, <img src="http://example.com/image.jpg" />, you would want to change this to <img src="//example.com/image.jpg" />. By removing the http:, the browser will use whichever protocol the visitor is already using.

  2. Install a mixed content fixer plugin which should automatically replace the http with https in these sections. For Wordpress, we have had success with the SSL Insecure Content Fixer plugin.

  3. Enable the Automatic HTTPS Rewrites on the SSL/TLS app to potentially fix these errors automatically. Resources loaded by JavaScript or CSS will not be automatically rewritten and mixed content warnings will still appear. In Google Chrome, if you notice a small shield with a red X, that indicates a script is being called via http and causing the mixed content issue. Automatic Rewrites will not fix that issue, you will need to edit your source code as described above.

  4. Mixed content issues are most often associated with Flexible SSL. Check to see if your SSL setting is Full or Flexible mode by logging into your Cloudflare dashboard and clicking on the SSL/TLS app to check the SSL setting.

  5. Failing the above and a more complex approach is to change your Content Security Policy Header always set Content-Security-Policy: upgrade-insecure-requests, or block-mixed-content. From Wikipedia, Content Security Policy (CSP) is a computer security standard introduced to prevent cross-site scripting (XSS), clickjacking and other code injection attacks resulting from execution of malicious content in the trusted web page context.

Lite Reading
https://support.cloudflare.com/hc/en-us/articles/200170476-How-do-I-fix-the-SSL-Mixed-Content-Error-Message-
https://support.cloudflare.com/hc/en-us/articles/227227647-How-do-I-use-Automatic-HTTPS-Rewrites-

Community Tutorial

Background Resources
Help Center
YouTube

Research The Issue
Learning Center
Community
Google

If You Need More Help
This community of other Cloudflare users may be able to assist you, login to Cloudflare and post your question to the Community. When you post on the Community make sure to include as much of this information as possible: the specific error message you are seeing, the URLs this is happening on, screen shot of the error, and the steps to reproduce the error. Please indicate what troubleshooting steps you’ve tried in order to help us help you.

This is a Cloudflare Community Tip, to review other tips click here.

Çevirme…traduzir…翻译…traducir…Traduire…Übersetzen…:greyg: Translate this Tip

FXMCCT 102219

3 Likes
Always Use HTTPS - images are not showing on WP website
Godaddy website is not secured but the WPAdmin login is secure, Why?
I got message "your connection to this site is not fully secure " on chrome
I got A DNS Problem
My website gets called twice
Unable to post , and modify post
Problemas con SSL
Dedicated SSL
How configure the Cloudflare Nameservers?
Error Content Mixed
SSL Certificate not working for two sites?
CloudFlare Free SSL working On Desktop Website But Not On Mobile
SSL On Website
SSL says it's active, site still shows HTTP
Images Not displaying of my site
Mixed Content
Why do http or https change my site
SSL says it's active, site still shows HTTP
Ssl with infinityfree
JS and CSS shows error 522 when Caching is on
SSL not active even after 3 days. It shows Authorizing Certificate
Help.....plz help
Message: Your connection is not fully secure
Ssl not working perfectly
[DNS isse] Error 526
Error in the web (ssl )
DNS not probagating
Site NOT SAFE How to solve this issue?
Website loading pre site landing page when Cloudflare is on
Webpages are Broken after Server Name Change @CloudFlare
Really Simple SSL failed to detect a valid SSL certificate. If you do have an SSL certificate, try to reload this page over https by clicking this button:
Really Simple SSL failed to detect a valid SSL certificate. If you do have an SSL certificate, try to reload this page over https by clicking this button:
Are folders protected?
Active Certificate: Website still not secure
Flexible SSL not working on my site
HTTPS not working. Cloudflare setting says protecting your site(https:// is active)
My domain redirects to another domain while accessing https URL
Failed to convert site from Http to Https
My .app domains won't display CSS, forces basic HTML. What's happening?
Unable to Fix Mixed Content Issues
I just started using CloudFlare and my website doesn't show any CSS
Issue with SSL
SSl "Candado" desaparece al cargar mi página web
Showing another unknown page design
Switching url to https causes a 404 error
Why website address doesn’t have the green lock?
DNS server IP address could not be found
Probleme in my ssl
Site not Secure on chrome - also expired certificate shown on safari
SSL Disappearing even when on full
Shows NOT SECURE on top left tab of the browser on my website
No nameservers displaying when setting up a new domain
Can't do a speed test, site not found!
Newbie trying to get https
My website is showing Not Secure in browser
My website is showing Not Secure in browser
Problema con ssl en imágenes
SSL error message site is not secure
SSL ertificate is not working properly on my site
Js and Css doesn't work
After install ssl
My website is unreachable after changing SSL to FULL
How can I fix my SSL and redirections?
Status "Operational" but I'm still offline
I have a problem with my website, I can change the DNS
Green Lock is not showing
Community Tip - All Published Tips
SSL WOrdpress not working
Some images not loading
Web site iFrame not visible if ssl enabled
Tengo este problema como soluciono
Problem with cloudflare ssl
What’s wrong with it?
WP bakery image issue when Cloudflare activated
My site don´t shows https
SSL issue with Wordpress.com-hosted blog
It is showing error 525 ssl handshaked failed
Wildcard SSL issues
Erreur dns
Https no longer secured
Using Cloudflare has caused an unexpected issue with my website
Fixing the mixed content problem with Automatic HTTPS Rewrites (some of the website pages not uses the "Automatic HTTPS rewrites")
Shared SSL Issues
Shared SSL Issues
Dedicated SSL will not enable
Images missing in chrome
Website SSL Not Working
404 500 errors
Changes to my website
Can't solve "Insecure Content Blocked" error after so many days R&D
Images not showing up on certain mobile devices
How to fix https:// issue
Unsupported protocol error
Cloud SLL Activated - Padlock Won't Fire On Browsers :(
SSL on subdomain not recognized
Automatic https rewrite not working
Site is Down - DNS Issues
Website Not Rendering Properly
I got https but no padlock. How do I get padlock?
SSL error? Shows Sitemap on home page
Configuring Cloudflare HTTPS with Auto-SSL issued to domain by cPanel
Though Universal SSL is active it is not showing the HTTPS
Posts are in "https" but main domain name is showing "not secure"
Getting "Not Secure" tag even when SSL is install properly
Problem to get ssl
SSL is not secure :/
Best Digital services in Lahore
SSL - A grey lock with an orange triangle?
Setting up SSL on my forum URL
Website down due to server does not support a common SSL protocol version or cipher suite
Broken image and cannot login
Images not loading on my wordpress site?
Website fonts and Icons are not appearing correctly to site visitor
SSL slove problem
Site is https but not secured with lock icon. Why?
SSL not working on my subdomain
Website Displaying site not fully secured
CSS, JS file load failed after using Cloudflare DNS
Lock pad appears and goes
Secure connection from my website has changed to not secure
My lock is not been shown
Shown Secured but not for all browsers!
Website still not secure
Cloudflare SSL Not Working
HELP - my site will only work in developer mode!
Wordpress FrontEnd Issue when Cloudflare Activated
SSL- Origin Certificates
SSL not working in sub pages
Ssl certificate cloudflare not work WooCommerce
Website showing stripped down version when using Cloudflare
Cloudflare serving unencrypted content despite 'Always Use HTTPS' enabled
Exclamation point only on my website instead of https
SHTML Not Working
Https:// not work in my subdomain
SHTML Not Working
My website is not secure yet?
SSL certificate has expired. How do I renew it?
Website block
Community Tip - Helpful Links, on Display
Website is not loading as secure
The main page of the site is not working correctly
Ssl not active to my site
Showing active status in my account but ssl is not working
SSL blocking my pictures
Site not secured yet, everything has been done
SSL and pics on www
Cloudflare Noob - SSL Help Needed
Connection not secure on Cloudflare
Still not secure
Image thumbnails and Automatic HTTPS Rewrites
Unsecured website (https is crossed out)
Je reçois une erreur 1000
Free Universal SSL does not working
New WordPress Plugin Update Crashed Site
My site does not show https status
Godaddy and SSL "The issuer of this certificate could not be found"
My site is "under development" for about 1.7% of visitors (title edited)
Enabled Cloudflare and encountered formatting issues
Getting 521 error sometimes and then resolves itself after few mins
My site is "under development" for about 1.7% of visitors (title edited)
Only homepage is not secure, other page is well
Automatic https rewrite not working
Clouflare not working on my site
The website does not work
My website not secure in web browser
Active Certificate: Website still display connection is not secure
Website not Secure even after https enable
Added Site To Cloudflare, But SSL is still Not active
Applied free SSL, changing links from http to https messed up my website
Redirect Loops and Redirect Chains
Http Mixed Content Warning
Loss of images
SSL error - not showing on home page
Step 4: Checking your site after adding it to Cloudflare
HELP I did everything correct - and cannot get SSL to work on site
SSL issue by CF cert
SSL appears and then disappears
Whats Wrong
My domain isn't secure
Http to https - issue
My site is still 'not secure'
What can i do ? about ssl
Website have active SSL but still shows not secure before https and lock also not shows
Cloudflare distorting Moodle Layout
Need help with my SSL
I add my site in cloudflare,its shows site unsafe,and not live yet
Pasé de godaddy a Cloudfare por tema de SSL
SSL certificate in firefox
SSL for root domain as well as subdomain
Browser (chrome) shows Not secure status with commercial ssl and https. What is wrong?
Can't get my ssl to work on my site raspberry host
Unknown certificate type
Mixed Content Issue For Images
Why flexible SSL mode is not the best choice
I cannot see my theme with complete design and its look like not responsive
No SSL on the homepage, but SSL on subpages
Having Issues with Activating External SSL
SSL/TLS Flexible: SSL ERR_SSL_PROTOCOL_ERROR
Wordpress admin not loading properly
Cambio de htts a https
Note Secure but Have Certificate
Proxied Cloudflare to Plesk
SSL missing on ONE page on website
SSL site not showing secure
Cloudflare 502 errors today WPO Wordpress
Help This site can’t provide a secure connection
Sub domains
Why does my website still say "not secure" when the SSL certificate is on file?
Can't remove "connection to this site is not fully secured" for my blog
Website showing Index of / instead
I'm trying to change to Cloudflare DNS from Godaddy
Http not redirecting to HTTPS
Ssl backend is padlock but front-end not in wordpress
Desaparece el candado ssl en mi sitio
Site not secure SSL flexible
SSL CERTIFICATE pending
All the image post links on my wordpress site are broken once my flexible SSL certificate has been confirmed
Broken wordpress site again!
Issues with SSL
Flexible SSL not showing
Install an Origin CA certificate...Apache httpd
Help! i think they broke my website!
Mi pagina principal no tiene seguridad
SSL not always using https
CSS not displaying properly, links go to Error 404
Padlock not appearing
Page rule created not showing https://
I have the SSL Certificate, but still "not secure"
Not secure in my site
Why no SSL on KopyandSonsLandscaping.com?
Connection "Not Secure", even though we have a Dedicated Cloudflare certificate
HTTPS not working, site not secure
Page Shows Not Secure badge, with https://
Chrome shows 'Not secure' with Vaild CA
Some pages not using ssl
Help! Domain redirection on my server?
Troubleshooting SSL/TLS issues
I am getting NOT SECURE error just on homepage of my website
SSL works on iOS but not on PC (Edge, Chrome)
My site is not showing ssl after migrating to cloudflare why?
Connect Cloudflare to Storenvy
Wordpress - displays not secure
Active SSL but still not secure
HTTPS not showing some post?
Dashboard speed section problem
Your connection to this site is not secure, no really! Lol
Your connection to this site is not secure, no really! Lol
SSL/TLS encryption mode is Full but still Site is not showing secure lock
YTCC - Broken SSL
Cloudflare SSL is not working
Post enabling CDN
SSL Issue with Wordpress multi site
TTFB and HTTPS
Free Cloudflare is creating lot of problems
Website crushed
Is it necessary to change hosting when using cloudflare?
Please help I can't get my site secure
SSL/https not working
SSL Configuration
"Not secure" problem
SSL Configuration
Https not set up correctly
Website not secure ssl issue
Https missing content
My website still ( Not Secure )
HTTPS/SSL is enabled but site still "not fully secure"
Only works on Phone
Help me please - my site goes down after activating ssl with cloudflare
After set up CloudFlare in blog all images disappeard
Recently joined - having problems uploading files in Wordpress
No sale el candado verde
Changing Server IP for a DNS
SSL problem with Wordpress URL
For beginners how to get SSL Certificate
Connection to the site is not secure
Universal SSL not working on subdomain
SSL not working on my site
Not fully secure
My Site Is Showing as Not Secure
No me carga el candado de web segura
SSl active but not secure at site
Secure padlock is not showing up
My Wordpress site shows not secured
Hey Fellas
Enable Automatic HTTPS Rewrites for my website but still the error of mixed content showing
'Not Secure' Website despite SSL being valid - help
Error 1014, DNS configuration, and health check errors
Certificate active but website "not secure"
Key Usage (80) & Basic Constraints SSL Error
Follow-up question for Sandro and Donmj - Secure Server while on HubSpot Email marketing
Subdomain SSL not working and wordpress admin 404 error
Website not secure
Site is unsafe even 6 hrs after Cloudflare nameserver changes
Site is unsafe even 6 hrs after Cloudflare nameserver changes
SSL Error on my site
SSL Not Consistent
SSL Not Consistent
Load more poste button it doesn't load
Load more poste button it doesn't load
Certificate is valid but browser says not secure
My SSL / HTTPS Certificate is not working & just available for the first second
''not secure'' url
SSL handshake 525 error
NON SSL resources not appearing Wordpress
I moved to cloudflare and my website get out of reach
Why do I open https The website doesn't work
CommunityTip - Security FAQ Read Me First
Unable to edit wpress divi theme after activating cloudflare ssl
Cloudflare SSL not wroking
Website labeled as unsecured by microsoft edge
Mixed content issues
Site shows not fully secure
Change SSL from Full to Flexible
Community Tip - Alle veröffentlichten Tipps
Community Tip - 公開されているすべてのヒント
Health Check, not healthy :(
Health Check, not healthy :(
Diagnostic Center : Check the HTTPS status
This site is under construction
Website is working but content damaged
Website is working but content damaged
Website is working but content damaged
Website is working but content damaged
Website is working but content damaged
Browser Integrity Check broken
Website is working but content damaged
SSL Certificate for two domain
SSl Error facing
Https:// in my site bot-tele1.ga not work
Can't edit pages in Wordpress (Page rules don't work), fixed ERR_TOO_MANY_REDIRECTS
Mixed content on cached page
SSL/TLS app Settings
520 error if I log in
Unable to visit domain with prefix
Need help with DNS
Domain cannot reach homeserver
Wordpress and SSL - need plugin after enable on Cloudflare?
Wordpress and SSL - need plugin after enable on Cloudflare?
Wordpress and SSL - need plugin after enable on Cloudflare?
New 525 Error
The connection for this site is not secure - I tried all solutions in Cloudflare community
The connection for this site is not secure - I tried all solutions in Cloudflare community
Login Page showing Not Secured in Search Bar
Login Page showing Not Secured in Search Bar
Cloudflare blocking my rest api request
Is HTTP basic access authentication secure via TLS request (https request header)?
Is HTTP basic access authentication secure via TLS request (https request header)?
Is HTTP basic access authentication secure via TLS request (https request header)?
Is HTTP basic access authentication secure via TLS request (https request header)?
Possible? Site broken by cloudflare?
Invalid SSL certificate *
Sometimes my domain and subdomain do not work
How to remove cloudflare parked page?
Https is not activated
Https is not activated
Help me please too
Http->https redirect doesn't work
My Site is not functioning good after i set up cloudflare
Diagnostic Center Showing HTTPS Errors
SSL doesnt work
SSL doesnt work
Images Does not load from https://my.ip.number/path/img.png
Automatice redirection to https from http is not happening
How to block all connections other than Cloudflare on port 80 through tunnel?
It works without SSL, but gives a 404 error when SSL is activated
Cloudflare domain directing to Juniper Networks
About Mixed Content
DS record not_found_ds_record mixed content and https status
Wordpress editor is blank after move to Cloudflare
Wordpress editor is blank after move to Cloudflare
Wordpress editor is blank after move to Cloudflare
SSL not working in Sub domain
Http not working but SSL work ?
Cloudflare page rules for Printful?
Managed/JS Challenge blocks CORS
Header checker giving me 999 on my hosted site urls
Website loads with https but does not shows Green pad lock
Help is there any one out there
Incorrect DNS Record+website down
Dig does not show TXT and CNAME records
Please help-website not loading correctly
Transferring website from hosting service to home webserver
I am facing ssl problem
How to set NameServer with IP (and Page Rules for Flexible SSL)
Contenido no seguro bloqueado (No se carga el CSS ni Scripts)
Brand logo from my website gone, immediately de-installed cloudflare :(
Style went wrong after ssl
I need help with Cloudflare's SSL Certificate
SSL certificate help
My wordpress site don't load theme file (css,js,fonts,icons) successfully
Gallery by bestwebsoft does not work with cloudflare
SSL Cert Not Working on 1 of 4 URLS
Cloudflare is blocking a resource causing it to be http, not https