For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

RyanF5_169352's avatar
RyanF5_169352
Icon for Nimbostratus rankNimbostratus
Oct 03, 2017

Mixed content error, stream profile didn't work

Hello all,   I've got an internal webpage that is loading insecure content. I'm getting the error: Mixed Content: The page at 'https://staging.xxxxx.com/' was loaded over HTTPS, but requested an ...
application delivery
devops
iRules
LTM
Anthony_Graber's avatar
Anthony_Graber
Icon for Employee rankEmployee
Oct 03, 2017

It's possible that your origin web server is encoding the responses. Can you verify if the responses are encoded?

 

•Since HTTP compression on the server prevents the BIG-IP system from reading the data stream and performing the intended replacement, you may need to configure the HTTP profile to remove the Accept-Encoding header in the request to prevent compression by the server.

 

https://support.f5.com/csp/article/K8115