Skip to content
Raptor home
Menu

Mixed content

security.mixed_content
Priority
High
Severity
Warning

What we look for

These https:// pages load images, scripts, styles, frames or media from http:// addresses, which is called mixed content.

Why it matters

Browsers block insecure scripts, styles and frames on a secure page, which can break it, and upgrade or block insecure images and media.

How to fix

Change each http:// file address to https:// in the page template, CMS or theme settings, after checking the file loads over https://. Remove any file that has no secure version.

Where you’ll see it

The id is stable, and every surface uses it, so it’s the thing to search for or hand to an agent.

Terminal
When it is one of the five findings under Fix first, raptor crawl prints the id under it.
Check: security.mixed_content
crawl.json and the CSV
The crawl JSON names the finding by this id, and so do the CSV and raptor_query.
"check_id": "security.mixed_content"
The HTML report
This link opens the finding in the report, and each finding shows its id.
crawl.html#finding=security.mixed_content
MCP
raptor_findings with this check_id returns the finding in full, with a fix brief ready to paste into a task. If it didn’t fire, it says why.
raptor_findings {
  "job_id": "...",
  "check_id": "security.mixed_content"
}