Portlets - Addressing Mixed Content - FIREFOX
Issue *
If the HTTPS page you visit includes HTTP content, the HTTP portion can be read or modified by attackers, even though the main page is served over HTTPS. When an HTTPS page has HTTP content, we call that content “mixed”. The page you are visiting is only partially encrypted and even though it appears to be secure, it isn't.
When you see the shield icon in the address bar, it means that Firefox has blocked content that is insecure.
As a result, parts of the page may not display.
To enable the insecure content in Firefox
Although not recommended, you can unblock the insecure content by selecting "Disable Protection on This Page" from the drop down box.
Firefox will then load the web page including any insecure content. The lock icon in the address bar will be replaced with an orange warning triangle icon to remind you that insecure content is being displayed.
To revert the previous action (block mixed content), open the web page in a new tab.
Using a Firefox Add On to Block or Display Mixed Content
As an alternative, a Firefox add on extension (Toggle Mixed Active Content) can be installed, which toggles the preference of blocking mixed active content on the web page.
The add-on can be toggled on or off by selecting the Add-on icon.
Green = Block insecure content |
|
|
Red = Display insecure content |
|
|
* Excerpts from "How does content that isn't secure affect my safety?" Retrieved 7 May 2014.
† screenshots in these examples are taken from Firefox Version 29.0
|