Browsers warn for mixed content when some resources (e.g. images, scripts or forms) on an HTTPS site is loaded over or posted to HTTP.
Resources on mixed content:
Questions tagged [mixed-content]
19 questions
18
votes
5 answers
Why do browsers warn about mixed content for images?
I'm dealing with a phpBB forum user who wants to set up SSL on their entire site to secure user credentials and "private" parts of the website.
However, they want to preserve the traditional forum user experience of user generated img tags to…
jldugger
- 283
- 2
- 6
16
votes
3 answers
Content hashes to help protect resources being fetched from a CDN
During a conversation in The DMZ, it was suggested that an SHA256 hash could be used to check that content being delivered from a CDN hasn't changed before being executed, similar to how Kim Dotcom's MEGA tried to do recently with CBC-MAC.
The…
Polynomial
- 132,208
- 43
- 298
- 379
10
votes
1 answer
What's the difference between frame-ancestors and child-src?
Both options seem to control who can embed the content in an