Back to Previous Page
Forward to Previous Page

Portlets - Addressing Mixed Content - FIREFOX

A security shield icon will appear in the address bar when mixed protocol content is detected.

Issue *

If the HTTPS page you visit includes HTTP content, the HTTP portion can be read or modified by attackers, even though the main page is served over HTTPS. When an HTTPS page has HTTP content, we call that content “mixed”. The page you are visiting is only partially encrypted and even though it appears to be secure, it isn't.

When you see the shield icon Firefox security warning shield icon in the address bar, it means that Firefox has blocked content that is insecure.

As a result, parts of the page may not display.

To enable the insecure content in Firefox

Although not recommended, you can unblock the insecure content by selecting "Disable Protection on This Page" from the drop down box.

Firefox browser - mixed content blocking options

Firefox will then load the web page including any insecure content. The lock icon in the address bar will be replaced with an orange warning triangle icon to remind you that insecure content is being displayed.

Firefox orange triangle mixed content reminder icon

To revert the previous action (block mixed content), open the web page in a new tab.

Using a Firefox Add On to Block or Display Mixed Content

As an alternative, a Firefox add on extension (Toggle Mixed Active Content) can be installed, which toggles the preference of blocking mixed active content on the web page.

Firefox Mixed Active Content Add on Extension installed

The add-on can be toggled on or off by selecting the Add-on icon.

Portlets - Mixed Content FF Add-on Green icon = Block insecure content

Green = Block insecure content

 

Portlets - Mixed Content FF Add-on Red icon = Display insecure content

Red = Display insecure content

 

 

 

* Excerpts from "How does content that isn't secure affect my safety?" Retrieved 7 May 2014.

screenshots in these examples are taken from Firefox Version 29.0

 

Oracle
Copyright © 2015, Oracle and/or its affiliates. All rights reserved.
Legal Notices

Version 9.0.1.20