# Topic-List-Previews plugin - Browser security warning due to preview images delivered over HTTP not HTTPS

**URL:** https://meta.discourse.org/t/topic-list-previews-plugin-browser-security-warning-due-to-preview-images-delivered-over-http-not-https/70264
**Category:** Support
**Created:** [9월 18, 2017, 11:29오전 UTC](https://meta.discourse.org/t/topic-list-previews-plugin-browser-security-warning-due-to-preview-images-delivered-over-http-not-https/70264 "2017-09-18T11:29:06Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![ChrisBeach](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisbeach/32/214628_2.png) [@ChrisBeach](https://meta.discourse.org/u/ChrisBeach)
#### Post date: [9월 18, 2017, 11:29오전 UTC](https://meta.discourse.org/t/topic-list-previews-plugin-browser-security-warning-due-to-preview-images-delivered-over-http-not-https/70264/1 "2017-09-18T11:29:06Z")

</div>

NOTE: this is not a Discourse bug, but originates in an unofficial plugin (Topic List Previews) - hopefully @Angus can help.

Repro: [https://se26.life](https://se26.life)

 ![12](https://global.discourse-cdn.com/meta/original/3X/a/d/ada5948e888266c37919cba32b8ade15e7e04774.png)

 ![03](https://global.discourse-cdn.com/meta/original/3X/d/b/db7d10e386d6a2f4337db06d1d119ca35fdd0263.jpg)

Page resources, showing image loaded over HTTP (not HTTPS)

 ![36](https://global.discourse-cdn.com/meta/original/3X/a/e/ae0f004a1fb38295dcfb95727c80f1cdd9f7ca9f.png)

I think this could be resolved by serving up the locally-downloaded image rather than the original image from the remote website.

The TLP plugin probably shouldn’t be serving remotely-hosted images

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [9월 18, 2017, 11:38오전 UTC](https://meta.discourse.org/t/topic-list-previews-plugin-browser-security-warning-due-to-preview-images-delivered-over-http-not-https/70264/2 "2017-09-18T11:38:33Z")

</div>

This is not our bug, unless this is our official plugin and it is not.

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [9월 18, 2017, 11:43오전 UTC](https://meta.discourse.org/t/topic-list-previews-plugin-browser-security-warning-due-to-preview-images-delivered-over-http-not-https/70264/3 "2017-09-18T11:43:02Z")

</div>

…but maybe @angus will have a look 🙂

---

<div class="post-metadata">

### Author: ![ChrisBeach](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/chrisbeach/32/214628_2.png) [@ChrisBeach](https://meta.discourse.org/u/ChrisBeach)
#### Post date: [9월 18, 2017, 11:50오전 UTC](https://meta.discourse.org/t/topic-list-previews-plugin-browser-security-warning-due-to-preview-images-delivered-over-http-not-https/70264/4 "2017-09-18T11:50:26Z")

</div>

> [@codinghorror](#):
>
> This is not our bug, unless this is our official plugin and it is not.

Have edited the OP accordingly

---

<div class="post-metadata">

### Author: ![angus](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/angus/32/341715_2.png) [@angus](https://meta.discourse.org/u/angus)
#### Post date: [9월 18, 2017, 11:13오후 UTC](https://meta.discourse.org/t/topic-list-previews-plugin-browser-security-warning-due-to-preview-images-delivered-over-http-not-https/70264/5 "2017-09-18T23:13:11Z")

</div>

Let’s move this discussion to the [TLP topic](https://meta.discourse.org/t/topic-list-previews/41630). I will respond there.

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [9월 19, 2017, 1:14오전 UTC](https://meta.discourse.org/t/topic-list-previews-plugin-browser-security-warning-due-to-preview-images-delivered-over-http-not-https/70264/6 "2017-09-19T01:14:20Z")

</div>


