# Insecure fonts requests

**URL:** https://meta.discourse.org/t/insecure-fonts-requests/261118
**Category:** Support
**Created:** [April 9, 2023, 7:31pm UTC](https://meta.discourse.org/t/insecure-fonts-requests/261118 "2023-04-09T19:31:44Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![silverdr](https://avatars.discourse-cdn.com/v4/letter/s/e19adc/32.png) [@silverdr](https://meta.discourse.org/u/silverdr)
#### Post date: [April 10, 2023, 8:41am UTC](https://meta.discourse.org/t/insecure-fonts-requests/261118/3 "2023-04-10T08:41:26Z")

</div>

Most probably no. Where do I set it? And why should it be needed in the first place instead of having the CSS request static assets over https or [relative references](https://www.rfc-editor.org/rfc/rfc3986#section-4.2)?

FWIW - on the outside facing webserver I do have the typical 301 set

#### Edit:

Found the setting based on [this post](https://meta.discourse.org/t/mixed-content-problem/121837/7), thank you @Arkshine

---

_[View the full topic](https://meta.discourse.org/t/insecure-fonts-requests/261118)._