Only Secure Content is Displayed

[h2oski]

I recently implemented paypalexpress, however when the customer gets bounced back from paypal back to our site on IE and Firefox they get the warning about mixed content.

"only secure content is Displayed" They can of course choose to ignore and everything is fine but very off putting.

I thought it was maybe some customisation that I had done that was causing the issue but as a test I went back to one of the default templates and still had the same issue. I have ssl on checkout only. I contacted paypal who looked at it and stated that it was the base HREF that was putting an entry in as http: and not https

Is there a way to change this or any other ideas as to what may be causing the problem.

Thanks for any help much appreciated

[prsweeney]

You can hit CTRL-SHIFT-J in Google Chrome and it will tell you which element isn't set up correctly. You may need to change the offending element to a link to it without specifying a protocol so that it will work whether it is http or https; meaning the link to it might look like "//domain.com/resource.js".....however on some types of pages Sellerdeck will choke on that, so just be mindful.

[h2oski]

Hi Thanks for that, that keycombo is very usefull to know.

The result it seemed to think that there was a lot of insecure content but a lot of the content being generated by Actinic Itself, meaning to my mind it is an inbuilt problem with the product that maybe needs patched, but if that was the case then I am sure more users would have the issue. For Instance :

[blocked] The page at https://www.irvinecycles.co.uk/cgi-b...=CN3VLCZX6XU3G ran insecure content from http://www.irvinecycles.co.uk/acatalog/actiniccore.js.

he page at https://www.irvinecycles.co.uk/cgi-b...=CN3VLCZX6XU3G displayed insecure content from http://www.irvinecycles.co.uk/acatalog/theme_shim.gif.

Yet I have no control over the actinccore.js or did not change theme_shim.gif
So what appears to me anyway is that default actinic is producing content within its paypal bounce page from an insecure source but I am not sure why and where I have made the mistake.

any further ideas would be great.

Thanks