Mixed content over HTTP in HTTPS request with HSTS Preload enfoced
-
I have enabled the HSTS preload to serve my website all over https. I have no issues on my website other than the jetpack plugin. The issue is that jetpack is requesting the resource over HTTP in its admin page, which is blocked by HSTS policy.
I need a prompt solution as its a blocker for jetpack services on our website, including woocommerce and wordpress android application.
I have attached the console log of chrome (overwritten the domain) as follow:
load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,moxiejs,plupload&ver=7bc64d1d60e1c49ae4e6f01b9d73e227:8 JQMIGRATE: Migrate is installed, version 1.4.1 load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,moxiejs,plupload&ver=7bc64d1d60e1c49ae4e6f01b9d73e227:4 Mixed Content: The page at 'https://www.kalashcards.com/wp-admin/admin.php?page=jetpack' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'https://www.xyz.com/wp-json/wp/v2/'. This request has been blocked; the content must be served over HTTPS. send @ load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,moxiejs,plupload&ver=7bc64d1d60e1c49ae4e6f01b9d73e227:4 ajax @ load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,moxiejs,plupload&ver=7bc64d1d60e1c49ae4e6f01b9d73e227:4 b.ajax @ backbone.min.js?ver=1.2.3:1 b.sync @ backbone.min.js?ver=1.2.3:1 sync @ wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1 fetch @ backbone.min.js?ver=1.2.3:1 initialize @ wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1 b.Model @ backbone.min.js?ver=1.2.3:1 N.d @ backbone.min.js?ver=1.2.3:1 wp.api.init @ wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1 (anonymous) @ wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1 (anonymous) @ wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1 wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1 N.d?{cid: "c3", attributes: {…}, _changing: false, _previousAttributes: {…}, changed: {…},?…}
Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
- The topic ‘Mixed content over HTTP in HTTPS request with HSTS Preload enfoced’ is closed to new replies.