Como corrigir um site da Web com conteúdo misto bloqueado

A partir do Firefox 23, o Firefox bloqueia o conteúdo misto ativo por predefinição. Isto segue uma prática adotada pelo Internet Explorer (A partir da versão 9) e Chrome.

Esta página explica a que deverá prestar atenção, como um programador da Web.

O seu site da Web poderá crachar

If your website delivers HTTPS pages, all active mixed content delivered via HTTP on this pages will be blocked by default. Consequently, your website may appear broken to users (if iframes or plugins don't load, etc.). Passive mixed content is displayed by default, but users can set a preference to block this type of content, as well.

Note that since mixed content blocking already happens in Chrome and Internet Explorer, it is very likely that if your website works in both of these browsers, it will work equally well in Firefox with mixed content blocking.

In any case, the best way to know if something is broken in Firefox is to download the latest Firefox Edition, open different pages on your website with the web console open (enable the "Security" messages) and see if anything related to mixed content is reported. Or use an online crawler like SSL-check, a desktop crawler like HTTPSChecker that will check your website recursively and find links to insecure content, or a CLI tool like mcdetect. If nothing is said about mixed content, your website is in good shape: Keep making excellent websites!

Como corrigir um site da Web

The best strategy to avoid mixed content blocking is to serve all the content as HTTPS instead of HTTP.

Para o seu próprio domínio, serve all content as HTTPS and fix your links.  Often, the HTTPS version of the content already exists and this just requires adding an "s" to links - http:// to https://.

However, in some cases, the path may just be incorrect to the media in question. There are online as well as offline tools (depending on your operating system) such as linkchecker to help resolve this.

Para outros domínios, use the site's HTTPS version if available. If HTTPS is not available, you can try contacting the domain and asking them if they can make the content available via HTTPS.