网站巡检未识别登录用户

← sutong

安全:混合内容(HTTPS 页面加载 HTTP 资源)

Security: Mixed Content
高 问题未解决 2 下载 CSV

通过 HTTPS 访问的页面里,有图片、脚本或样式表等资源仍通过不安全的 HTTP 加载。这会削弱 HTTPS 的保护,浏览器可能直接拦截这些资源(导致图片不显示、功能失效),或在地址栏提示「不安全」。

如何修复:把这些资源地址全部改为 HTTPS。常见原因是旧文章或页面里写死了 http:// 图片地址,可以在数据库中批量替换网址(WordPress 可用 Better Search Replace 等插件),并检查主题和插件设置里的资源地址。

Screaming Frog 英文原文

HTML pages loaded over a secure HTTPS connection that have resources such as images, JavaScript or CSS that are loaded via an insecure HTTP connection. Mixed content weakens HTTPS, and makes the pages easier for eavesdropping and compromising otherwise secure pages. Browsers might automatically block the HTTP resources from loading, or they may attempt to upgrade them to HTTPS. HTTP resources can be viewed in the 'outlinks' tab for each URL, and exported alongside the pages they are on via 'Bulk Export > Security > Mixed Content'.

How to fix: All HTTP resources should be changed to HTTPS to avoid security issues, and problems loading in a browser.

负责人状态备注

未解决

页面首次发现
https://www.sutongtechnology.com/blog/what-are-the-different-types-of-trays-in-columns.html
→ http://ntsutong.webdemodesign.site/blog/upload/content/65747f860267e1180230.jpg
11-03 10:56
https://www.sutongtechnology.com/blog/what-are-the-different-types-of-trays-in-columns.html
→ http://ntsutong.webdemodesign.site/blog/upload/content/65747f925f45d7918150.jpg
11-03 10:56