Firefox: Inspecting mixed content warnings (and how to enable them)

Updated . Posted . Visible to the public.

Having your site run on SSL is worthless when you include content over an unsafe connection (HTTP).

Here is how to hunt down mixed content with Firefox.

How to enable mixed content alerts

If your Firefox does not warn you about mixed content on pages (mine did not), you can enable it again:

Visit about:config and search for security.warn_viewing_mixed. If it's set to false, set it back to true again.

Seeing which URLs are fetched from unsecured connections

Firefox 16+ will show you mixed content in its "Web Console".
Open it from the "Tools" menu or by pressing Ctrl + Shift + K.

Requests appear in black text. If you are on a secure connection, mixed content from HTTP sites will appear in red.

If there are too many requests in the log, you can use the filter field on the top right and put "http://" in it.

Arne Hartherz
Last edit
Niklas Hasselmeyer
License
Source code in this card is licensed under the MIT License.
Posted by Arne Hartherz to makandra dev (2012-10-29 14:32)