Security & Trust
Mixed Content Checker
Find every insecure HTTP resource hiding on an HTTPS page before the browser blocks it, or a visitor sees the warning.
What it checks
- ✓Scans scripts, stylesheets, images, iframes, and inline styles for HTTP references on HTTPS pages
- ✓Separates active content (scripts, CSS, iframes -- full compromise risk) from passive content (images -- lower risk, still flagged)
- ✓Detects whether your CSP already mitigates the issue via upgrade-insecure-requests
- ✓Lists every distinct offending host, so you know exactly what to fix and where