mixed content

[freddyb]

The check for mixed content ('HttpsResourceOnHttpsLink') does not parse https resources.
That means that 'secure' CSS or JS files which trigger the load of files via HTTP will not be detected.

Example:
page.html (HTTPS) loads style.css (HTTPS), which subsequently requires a background-image that is only available via http.