• Resolved itsgauravjain22

    (@itsgauravjain22)


    I have enabled the HSTS preload to serve my website all over https. I have no issues on my website other than the jetpack plugin. The issue is that jetpack is requesting the resource over HTTP in its admin page, which is blocked by HSTS policy.

    I need a prompt solution as its a blocker for jetpack services on our website, including woocommerce and wordpress android application.

    I have attached the console log of chrome (overwritten the domain) as follow:

    load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,moxiejs,plupload&ver=7bc64d1d60e1c49ae4e6f01b9d73e227:8 JQMIGRATE: Migrate is installed, version 1.4.1
    load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,moxiejs,plupload&ver=7bc64d1d60e1c49ae4e6f01b9d73e227:4 Mixed Content: The page at 'https://www.kalashcards.com/wp-admin/admin.php?page=jetpack' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'https://www.xyz.com/wp-json/wp/v2/'. This request has been blocked; the content must be served over HTTPS.
    send @ load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,moxiejs,plupload&ver=7bc64d1d60e1c49ae4e6f01b9d73e227:4
    ajax @ load-scripts.php?c=0&load[]=jquery-core,jquery-migrate,utils,moxiejs,plupload&ver=7bc64d1d60e1c49ae4e6f01b9d73e227:4
    b.ajax @ backbone.min.js?ver=1.2.3:1
    b.sync @ backbone.min.js?ver=1.2.3:1
    sync @ wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1
    fetch @ backbone.min.js?ver=1.2.3:1
    initialize @ wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1
    b.Model @ backbone.min.js?ver=1.2.3:1
    N.d @ backbone.min.js?ver=1.2.3:1
    wp.api.init @ wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1
    (anonymous) @ wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1
    (anonymous) @ wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1
    wp-api.min.js?ver=7bc64d1d60e1c49ae4e6f01b9d73e227:1 N.d?{cid: "c3", attributes: {…}, _changing: false, _previousAttributes: {…}, changed: {…},?…}
Viewing 1 replies (of 1 total)
  • Plugin Contributor James Huff

    (@macmanx)

    Please try disconnecting Jetpack from WordPress.com at Jetpack > Dashboard > Site Connection > Manage Site Connection in your site’s Dashboard, then connect again when prompted.

    That should correct the issue.

Viewing 1 replies (of 1 total)
  • The topic ‘Mixed content over HTTP in HTTPS request with HSTS Preload enfoced’ is closed to new replies.