Site https/http bug

[FloreG]

Bonjour, 

 

Je rencontre actuellement un souci avec mon site internet. 

 

En effet, le site est censé fonctionner en https et pourtant les images du slider sont appelées en http dû à une font Raleway. J'ai une alerte qui indique le problème rencontré : Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Raleway:100,200,300,700,800,900'. This request has been blocked; the content must be served over HTTPS.

 

Je n'ai trouvé aucun moyen de le résoudre. J'ai un ami développer qui a fouillé le site de fond en comble et il n'a trouvé aucune trace de cette font Raleway à la source du problème. 

 

Est ce que qqn serait comment résoudre ce bug ?

 

Merci par avance. 

Flore

Edited July 24, 2017 by FloreG (see edit history)

[Eolia]

Lol... il n'y en a pas qu'une^^

(index):2 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Raleway:100,200,300,700,800,900'. This request has been blocked; the content must be served over HTTPS.
3(index):2 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/dummy.png'. This content should also be served over HTTPS.
(index):2 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/img/cms/Logo-Matchy-06.png'. This content should also be served over HTTPS.
v_35_ff58589….js:450 ThemePunch GreenSocks Logs
v_35_ff58589….js:557 Slider Revolution 4.5.7 Initialisation on undefined
v_35_ff58589….js:557 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/bd5acfddbda717180a84ff57dde0f679.jpg'. This content should also be served over HTTPS.
(anonymous) @ v_35_ff58589….js:557
fontawesome-webfont.woff Failed to load resource: the server responded with a status of 404 (Not Found)
v_35_ff58589….js:515 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/bd5acfddbda717180a84ff57dde0f679.jpg'. This content should also be served over HTTPS.
a.getStyle @ v_35_ff58589….js:515
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure stylesheet 'http://fonts.googleapis.com/css?family=Raleway:100,200,300,700,800,900'. This request has been blocked; the content must be served over HTTPS.
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/thumb_2fa2e705093174ff3daeb2653703bd68.jpg'. This content should also be served over HTTPS.
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/thumb_619e145ea97c2c800d45c1a33799d33b.jpg'. This content should also be served over HTTPS.
capture-apps-5.0.0.js:6 XHR finished loading: GET "https://appsapi.veinteractive.com/api/appsmanagerinit?isCookieEnabled=true&….com%2Fen%2F&journeyCode=4ffe4b8b-ee26-4db6-bdc6-87523dbc708c&o=2471095172".
a.xhrRequest @ capture-apps-5.0.0.js:6
b @ capture-apps-5.0.0.js:6
a.request @ capture-apps-5.0.0.js:6
value @ capture-apps-5.0.0.js:4
value @ capture-apps-5.0.0.js:4
value @ capture-apps-5.0.0.js:4
value @ capture-apps-5.0.0.js:3
h @ capture-apps-5.0.0.js:5
j @ capture-apps-5.0.0.js:5
k @ capture-apps-5.0.0.js:5
capture-apps-5.0.0.js:6 XHR finished loading: GET "https://cookiee1.veinteractive.com/api/SetCookie/4ffe4b8b-ee26-4db6-bdc6-87523dbc708c?o=2471095172".
a.xhrRequest @ capture-apps-5.0.0.js:6
b @ capture-apps-5.0.0.js:6
a.request @ capture-apps-5.0.0.js:6
i.getCookie @ capture-apps-5.0.0.js:3
value @ capture-apps-5.0.0.js:4
value @ capture-apps-5.0.0.js:3
h @ capture-apps-5.0.0.js:5
j @ capture-apps-5.0.0.js:5
k @ capture-apps-5.0.0.js:5
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/2fa2e705093174ff3daeb2653703bd68.jpg'. This content should also be served over HTTPS.
v_35_ff58589….js:557 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/2fa2e705093174ff3daeb2653703bd68.jpg'. This content should also be served over HTTPS.
(anonymous) @ v_35_ff58589….js:557
each @ v_35_ff58589….js:2
each @ v_35_ff58589….js:2
E @ v_35_ff58589….js:557
x @ v_35_ff58589….js:557
(anonymous) @ v_35_ff58589….js:557
(anonymous) @ v_35_ff58589….js:557
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/thumb_619e145ea97c2c800d45c1a33799d33b.jpg'. This content should also be served over HTTPS.
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/thumb_bd5acfddbda717180a84ff57dde0f679.jpg'. This content should also be served over HTTPS.
v_35_ff58589….js:515 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/2fa2e705093174ff3daeb2653703bd68.jpg'. This content should also be served over HTTPS.
a.getStyle @ v_35_ff58589….js:515
E.getTransform @ v_35_ff58589….js:515
parser @ v_35_ff58589….js:515
l.parse @ v_35_ff58589….js:515
l._onInitTween @ v_35_ff58589….js:515
n._initProps @ v_35_ff58589….js:473
n._init @ v_35_ff58589….js:473
n.render @ v_35_ff58589….js:473
(anonymous) @ v_35_ff58589….js:473
D.set @ v_35_ff58589….js:473
g @ v_35_ff58589….js:557
k @ v_35_ff58589….js:557
(anonymous) @ v_35_ff58589….js:557
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/619e145ea97c2c800d45c1a33799d33b.jpg'. This content should also be served over HTTPS.
v_35_ff58589….js:557 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/619e145ea97c2c800d45c1a33799d33b.jpg'. This content should also be served over HTTPS.
(anonymous) @ v_35_ff58589….js:557
each @ v_35_ff58589….js:2
each @ v_35_ff58589….js:2
E @ v_35_ff58589….js:557
x @ v_35_ff58589….js:557
(anonymous) @ v_35_ff58589….js:557
(anonymous) @ v_35_ff58589….js:557
v_35_ff58589….js:515 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/619e145ea97c2c800d45c1a33799d33b.jpg'. This content should also be served over HTTPS.
a.getStyle @ v_35_ff58589….js:515
E.getTransform @ v_35_ff58589….js:515
parser @ v_35_ff58589….js:515
l.parse @ v_35_ff58589….js:515
l._onInitTween @ v_35_ff58589….js:515
n._initProps @ v_35_ff58589….js:473
n._init @ v_35_ff58589….js:473
n.render @ v_35_ff58589….js:473
(anonymous) @ v_35_ff58589….js:473
D.set @ v_35_ff58589….js:473
g @ v_35_ff58589….js:557
k @ v_35_ff58589….js:557
(anonymous) @ v_35_ff58589….js:557
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/thumb_bd5acfddbda717180a84ff57dde0f679.jpg'. This content should also be served over HTTPS.
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/thumb_2fa2e705093174ff3daeb2653703bd68.jpg'. This content should also be served over HTTPS.
v_35_ff58589….js:515 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/bd5acfddbda717180a84ff57dde0f679.jpg'. This content should also be served over HTTPS.
a.getStyle @ v_35_ff58589….js:515
E.getTransform @ v_35_ff58589….js:515
parser @ v_35_ff58589….js:515
l.parse @ v_35_ff58589….js:515
l._onInitTween @ v_35_ff58589….js:515
n._initProps @ v_35_ff58589….js:473
n._init @ v_35_ff58589….js:473
n.render @ v_35_ff58589….js:473
(anonymous) @ v_35_ff58589….js:473
D.set @ v_35_ff58589….js:473
g @ v_35_ff58589….js:557
k @ v_35_ff58589….js:557
(anonymous) @ v_35_ff58589….js:557
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/thumb_2fa2e705093174ff3daeb2653703bd68.jpg'. This content should also be served over HTTPS.
2(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/thumb_619e145ea97c2c800d45c1a33799d33b.jpg'. This content should also be served over HTTPS.
(index):1 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/thumb_bd5acfddbda717180a84ff57dde0f679.jpg'. This content should also be served over HTTPS.
v_35_ff58589….js:515 Mixed Content: The page at 'https://matchycycling.com/en/' was loaded over HTTPS, but requested an insecure image 'http://matchycycling.com/modules/jmssliderlayer/img/2fa2e705093174ff3daeb2653703bd68.jpg'. This content should also be served over HTTPS.

Soit cette fonte est appelée dans le header.tpl du thème, soit depuis un module de configuration.

 

Ensuite pour les images, un scan/replace dans la bdd s'impose ainsi qu'une vérification de la conformité des modules avec les standards Prestashop

[FloreG]

Oui, je sais qu'il n'y en a pas qu'une mais je ne suis pas developper donc il est difficile pour moi de résoudre toutes les alertes. 

 

Je vais regarder à nouveau le header.tpl et les modules avec mon ami developper mais il n'avait rien trouvé. Il m'avait déjà évoqué l'idée que cela venait d'un module...

 

En ce qui concerne les images, comment dois-je faire un scann/replace ? Ainsi qu'une verification de conformité des modules avec les standards Prestahsop ? Ayant été tous téléchargés ou achetés sur le platform Prestashop, ne sont-ils pas censé déjà être tous conforme ?

 

Merci 

[Eolia]

Il faut des scripts pour éditer tout ça ou s'y connaitre en requetes bdd.

Vous pouvez aussi reprendre tous les modules comportant des uploads et les reconfigurer pour qu'ils prennent en compte le nouveau protocole lors de l'enregistrement.

 

Si vous ré-enregistrez la même image dans un slider, le module va l'enregistrer avec la bonne url.

 

Pour les thème & modules achetés sur Addons, la seule chose vérifiée est la conformité PSR-2 (Norme de codage) et la non présence de liens vers le site de l'auteur ou de code malicieux.

Pour le reste, ni l'utilité, ni les fonctionnalités ne sont testées.