Any ideas how to fix this? I see that the schema.org urls are going through http protocol, could this be the problem? URL of my forum is wmforum.geek.hr [image]

Hi @steelmaiden [image] steelmaiden: I see that the schema.org urls are going through http protocol, could this be the problem? no, that’s not the problem. These are internal definitions {"@context":"http://schema.org","@type":"WebSite","url":"https://wmforum.geek.hr","potentialAction":{"@type":"SearchAction","target":"https://wmforum.geek.hr/search?q={search_term_string}","query-input":"required name=search_term_string"}} like namespace definitions, not urls used to load the content. I don’t see mixed content warnings. Use Ctrl + Shift + I, then check the console to find the urls.

Got this: Refused to load the script 'https://certify-js.alexametrics.com/atrk.js' because it violates the following Content Security Policy directive: "script-src https://wmforum.geek.hr/logs/ https://wmforum.geek.hr/sidekiq/ https://wmforum.geek.hr/mini-profiler-resources/ https://wmforum.geek.hr/assets/ https://wmforum.geek.hr/brotli_asset/ https://wmforum.geek.hr/extra-locales/ https://wmforum.geek.hr/highlight-js/ https://wmforum.geek.hr/javascripts/ https://wmforum.geek.hr/plugins/ https://wmforum.geek.hr/theme-javascripts/ https://wmforum.geek.hr/svg-sprite/ https://www.google-analytics.com/analytics.js https://cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. and this: Refused to load the script 'https://script.dotmetrics.net/door.js?id=1249' because it violates the following Content Security Policy directive: "script-src https://wmforum.geek.hr/logs/ https://wmforum.geek.hr/sidekiq/ https://wmforum.geek.hr/mini-profiler-resources/ https://wmforum.geek.hr/assets/ https://wmforum.geek.hr/brotli_asset/ https://wmforum.geek.hr/extra-locales/ https://wmforum.geek.hr/highlight-js/ https://wmforum.geek.hr/javascripts/ https://wmforum.geek.hr/plugins/ https://wmforum.geek.hr/theme-javascripts/ https://wmforum.geek.hr/svg-sprite/ https://www.google-analytics.com/analytics.js https://cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.js". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. Those are tracking scripts, i need them to run properly.

If I’m not wrong, you likeky need to add those scripts in content security policy script src.

Your connection to this site is not fully secure

Product Support

JuergenAuer (Juergen Auer) September 14, 2020, 10:49am 5

These are not mixed content warnings.

These are other problems you should fix.

Mixed content warnings: Images via http.

Topic		Replies	Views
Schema of internal link meta itemprop url showing http version Product Support	4	1380	March 23, 2017
Embedding Discourse Comments via Javascript over https Product Support	2	781	January 31, 2020
Images URLs are broken (https: part not being included) Product Support	4	488	October 6, 2021
Mixed Content warnings Product Support	8	851	September 11, 2020
How to send http request Development	9	1569	December 14, 2016

Your connection to this site is not fully secure

Related topics