Skip to content
uencoder

Block Mixed Content

Blocking mixed content is the browser actively refusing HTTP active resources (script/css/iframe) inside HTTPS pages to prevent tampering.

Purpose

To enforce browser-level blocking of active mixed content, preventing HTTP resources from undermining the security of an HTTPS page.

Mechanism

Modern browsers block active mixed content (script, stylesheet, iframe, fetch) by default and log console errors. Passive mixed content (img/media) can be configured to be blocked as well.

Use cases

  • Browser security policy
  • Mixed-content blocking
  • HTTPS protection

Related tools

References