Mixed content handling

When a document is loaded over HTTPS, browsers ensure that none of the document's resources are loaded over an insecure protocol. Instead, resources that the document attempts to load over an insecure protocol are either loaded over HTTPS or are blocked.

Baseline Status: Achieved Widely Available on Jul 15, 2022 (Cross-browser Newly Available since Jan 15, 2020).

Desktop Browser Engine Support

Google Chrome

44

Supported

Mozilla Firefox

23

Supported

Apple Safari

≤9.1

Supported

Microsoft Edge

79

Supported

Mobile Browser Engine Support

Chrome Android

44

Firefox Android

23

Safari iOS

≤9.3

Specifications and References

Specification ↗ Feature XML ↗

MDN Browser Compat Data Keys:

http.mixed-content ↗ http.mixed-content.allow_file_urls ↗ http.mixed-content.allow_localhost_url ↗ http.mixed-content.allow_loopback_url ↗ http.mixed-content.auto_upgrade_images ↗ http.mixed-content.auto_upgrade_video_audio ↗ http.mixed-content.block_mixed_downloads ↗ http.mixed-content.blockable_mixed_content ↗