nilsenpaul/craft-complete-cookie-consent

Mixed content

Closed this issue · 5 comments

Hey!
We are getting an error of mixed content because of a banner: actions/complete-cookie-consent/consent/banner-info
"...was loaded over HTTPS, but requested an insecure resource..." "This request has been blocked; the content must be served over HTTPS.".
Could you please help me to fix this? Our website doesn't allow http.

Normally, that request would use the siteUrl of the site it's used on. Could you verify that the siteUrl is set to https?

Does the website allow for public access, so we can take a look at the issue?

I have checked if the server has configured the siteUrl with the https, and it does, but somehow it is using one with http.
We are testing it in STG, and it doesn't have public access.

Mixed Content: The page at 'x' was loaded over HTTPS, but requested an insecure resource 'http://x/actions/complete-cookie-consent/consent/banner-info'. This request has been blocked; the content must be served over HTTPS.

If you can give me a contact email, I can give you more information.
Thank you!

Sure, please use plugins@nilsenpaul.nl!

Problem solved. This had to do with the action URL having a double slash, and thus being redirected to a non-https version, causing the error. Next release de-doubles the action URL.