Forum Discussion

RyanF5_169352's avatar
RyanF5_169352
Icon for Nimbostratus rankNimbostratus
Oct 03, 2017

Mixed content error, stream profile didn't work

Hello all,

 

I've got an internal webpage that is loading insecure content. I'm getting the error: Mixed Content: The page at 'https://staging.xxxxx.com/' was loaded over HTTPS, but requested an insecure image 'http://content2.xxxxx.com/NewXXXXXImage/images/hero-06-electric.jpg'. This content should also be served over HTTPS.

 

We tried to use a stream profile that fixed some of the erros, but caused our customer to have errors while logging in. Stream profile: @@

 

Any help would be appreciated. Thank you!

 

application delivery
devops
iRules
LTM
  • Anthony_Graber's avatar
    Anthony_Graber
    Icon for Employee rankEmployee
    Oct 03, 2017

    It's possible that your origin web server is encoding the responses. Can you verify if the responses are encoded?

     

    •Since HTTP compression on the server prevents the BIG-IP system from reading the data stream and performing the intended replacement, you may need to configure the HTTP profile to remove the Accept-Encoding header in the request to prevent compression by the server.

     

    https://support.f5.com/csp/article/K8115