Where insecure content "was downloaded via HTTPS, but requested an insecure prefetch resource",

Question

This URL: https://steakovercooked.com/wedding/schedule-wedding-ceremony/

I can't find insecure content, and Chrome keeps complaining,

any ideas?

Answer 1

Mixed content alerts appear when an HTTPS page is prompted to download a resource via HTTP.

This is dangerous because insecure resources are vulnerable to being modified by an active attacker or eavesdropping by a passive attacker, which violates the user's expectations regarding the security of an HTTPS page.

https://developers.google.com/web/fundamentals/security/prevent-mixed-content/fixing-mixed-content?hl=en

Answer 2

You are trying to access via “http” on the “https” site in order to use the content “https”. You must not access insecure data on a secure channel.

Answer 3

Update links by adding a meta tag, e.g. bello

<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests">