安全:协议相对的资源链接
页面用协议相对链接(以 // 开头、不写 https:)加载图片、脚本或样式表。在全站 HTTPS 的今天,这种写法已不推荐,可能带来中间人攻击风险和性能问题。
如何修复:把这些资源链接改为完整的 https:// 地址。通常出现在主题模板或第三方代码片段中。
Screaming Frog 英文原文
URLs that load resources such as images, JavaScript and CSS using protocol-relative links. A protocol-relative link is simply a link to a URL without specifying the scheme (for example, //screamingfrog.co.uk). It helps save developers time from having to specify the protocol and lets the browser determine it based upon the current connection to the resource. However, this technique is now an anti-pattern with HTTPS everywhere, and can expose some sites to 'man in the middle' compromises and performance issues
How to fix: Update any resource links to be absolute links including the scheme (HTTPS) to avoid security and performance issues.
| 负责人 | 状态 | 备注 | |
|---|---|---|---|
未解决
| 页面 | 首次发现 | |
|---|---|---|
| https://www.sutongtechnology.com/ | 11-03 10:56 |