webzod
account

Load images and media over HTTPS on Cloudflare

headers.resources.mixed_passive · effort: about an hour

Why it matters

http:// images, audio and video on an https page can be swapped or watched on the network, and browsers either upgrade them or mark the page as not fully secure. Switching them to https:// URLs removes the risk and the warning.

The fix

  1. Automatic HTTPS Rewrites (SSL/TLS, Edge Certificates) rewrites only URLs Cloudflare knows are available over https, and may leave images untouched, so treat it as a partial stopgap.
  2. Fix the image and media URLs at the source.

Read the documentation (opens in a new tab)

Scan your domain to see whether this applies to you.