Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Insecure content not loaded on websites using HSTS #32

Open
txtsd opened this issue Jun 18, 2016 · 0 comments
Open

Insecure content not loaded on websites using HSTS #32

txtsd opened this issue Jun 18, 2016 · 0 comments

Comments

@txtsd
Copy link

txtsd commented Jun 18, 2016

Description of the problem

I serve my website exclusively over https using Strict Transport Security (HSTS). 1999 requests several resources explicitly over http, creating mixed content errors. The content can only be served over https so the resources are blocked in the browser.

Steps to reproduce
  1. [First step]
    Set up a server (nginx) and configure HSTS
  2. [Second step]
    Set up the server (nginx) to reverse proxy to the 1999 server
  3. [Third Step]
    Visit the website you just set up and you'll see these errors in your browser
What you expected to happen

The website and its resources from fargo.io should've loaded normally

Other data

OS: Archlinux
Browser: Chrome v52.0.2743.33 beta (64-bit)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant