loading scripts from unauthenticated sources? [SOLVED] - View the solution

[bobjones]

loading scripts from unauthenticated sources?

by bobjones » Mon Nov 27, 2017 3:45 am

I noticed a red shield icon in chrome today on all of my tours.



I have SSL on my site.

Giving me this error: This page is trying to load scripts from unauthenticated sources



"Load unsafe scripts?"

What is this error?

I'm hosting tours for clients, I really need to sort this out before a client asks me about my "unsafe scripts".

[Annis]

Re: loading scripts from unauthenticated sources?

by Annis » Mon Nov 27, 2017 4:32 pm

Do you have a link to one of the tours that has this?

[bobjones]

Re: loading scripts from unauthenticated sources?

by bobjones » Tue Nov 28, 2017 2:39 am

Here is one of them: https://chrisogrady.com/virtual-tours/s ... l?s=pano28

[360-compunics-com-ni]

Re: loading scripts from unauthenticated sources?

by 360-compunics-com-ni » Fri Dec 01, 2017 6:26 am

This is what the Chrome-developer tools show when loading your page:

Mixed Content: The page at 'https://chrisogrady.com/virtual-tours/sky-premium/virtual-tour.html?s=pano28' was loaded over HTTPS, but requested an insecure script 'http://chrisogrady.com/'. This request has been blocked; the content must be served over HTTPS.

[bobjones]

Re: loading scripts from unauthenticated sources?

by bobjones » Fri Dec 01, 2017 6:39 am

Thanks so much for your help!

I have no idea why it's requesting scripts from the non https domain.

I just had a look at the developer tools. Thanks for pointing that out!

Even the homepage author field is https.

I wish someone from Kolor could help with this. They tend to disappear in but reporting threads...

[360-compunics-com-ni]

Re: loading scripts from unauthenticated sources?

by 360-compunics-com-ni » Fri Dec 01, 2017 7:47 am

I've had another look, the file "virtual-tour_messages_en.xml" contains the blocked http-request:

<data name="en_project_author_url"><![CDATA[http://chrisogrady.com]]></data>

[bobjones]

Re: loading scripts from unauthenticated sources?

by bobjones » Fri Dec 01, 2017 8:34 am

Thanks for looking into this :-)

I have another tour right now with that line as HTTPS:

https://chrisogrady.com/virtual-tours/y ... -tour.html

<data name="en_project_author_url"><![CDATA[https://chrisogrady.com]]></data>

[Annis]

Re: loading scripts from unauthenticated sources?  [SOLVED]

by Annis » Tue Dec 05, 2017 3:04 pm

There are other links in your tour that are in http instead of https, check them all.
Visibly these are the links in the sidebar.

I'm really sorry for the delays in answering but these have been busy times and I have been off sick a lot.

[bobjones]

Re: loading scripts from unauthenticated sources?

by bobjones » Tue Dec 05, 2017 3:23 pm

Thanks for catching that Annis.