网站巡检未识别登录用户

← sutong

安全:协议相对的资源链接

Security: Protocol-Relative Resource Links
低 警告未解决 1 下载 CSV

页面用协议相对链接(以 // 开头、不写 https:)加载图片、脚本或样式表。在全站 HTTPS 的今天,这种写法已不推荐,可能带来中间人攻击风险和性能问题。

如何修复:把这些资源链接改为完整的 https:// 地址。通常出现在主题模板或第三方代码片段中。

Screaming Frog 英文原文

URLs that load resources such as images, JavaScript and CSS using protocol-relative links. A protocol-relative link is simply a link to a URL without specifying the scheme (for example, //screamingfrog.co.uk). It helps save developers time from having to specify the protocol and lets the browser determine it based upon the current connection to the resource. However, this technique is now an anti-pattern with HTTPS everywhere, and can expose some sites to 'man in the middle' compromises and performance issues

How to fix: Update any resource links to be absolute links including the scheme (HTTPS) to avoid security and performance issues.

负责人状态备注

未解决

页面首次发现
https://www.sutongtechnology.com/11-03 10:56