Forum Discussion

RyanF5_169352's avatar
RyanF5_169352
Icon for Nimbostratus rankNimbostratus
Oct 03, 2017

Mixed content error, stream profile didn't work

Hello all,

 

I've got an internal webpage that is loading insecure content. I'm getting the error: Mixed Content: The page at 'https://staging.xxxxx.com/' was loaded over HTTPS, but requested an insecure image 'http://content2.xxxxx.com/NewXXXXXImage/images/hero-06-electric.jpg'. This content should also be served over HTTPS.

 

We tried to use a stream profile that fixed some of the erros, but caused our customer to have errors while logging in. Stream profile: @@

 

Any help would be appreciated. Thank you!

 

1 Reply

  • It's possible that your origin web server is encoding the responses. Can you verify if the responses are encoded?

     

    •Since HTTP compression on the server prevents the BIG-IP system from reading the data stream and performing the intended replacement, you may need to configure the HTTP profile to remove the Accept-Encoding header in the request to prevent compression by the server.

     

    https://support.f5.com/csp/article/K8115