I've just updated to Firefox 27 and I started to get a lot of "Blocked loading mixed active content" which is something that was introduced back in Firefox 23, but now is very much enforced.

Quick fix is to use protocol relative urls and make sure they have a valid certificate for ssl protocol.

So far in bootstrap theme I only had to change line 75 of js/bootstrap.admin.js

From:
$.get("http://api.bootswatch.com/3/", function (data) { ... }

To:
$.get("//bootswatch.aws.af.cm/3/", function (data) { .. }

Note that api.bootswatch.com doesn't validate with the server's certificate and which is why using it's alias bootswatch.aws.af.cm is the only way to get both http and https to work under the protocol relative url.

Comments

omarchicas’s picture

Issue summary: View changes
pdesai’s picture

Thanks for this fix! This got rid of the error; however, now I am getting warnings of mixed content with insecure images - one for each theme's thumbnail rendering from http://bootswatch.com instead of https://bootswatch.com.

Any ideas?

markhalliwell’s picture

Title: Blocked loading mixed active content » Bootswatch API request and content is protocol specific
Version: 7.x-3.0 » 7.x-3.x-dev
markhalliwell’s picture

Status: Active » Closed (duplicate)
Related issues: +#2450757: Provide a more robust CDN solution

This was fixed by this related issue. See the change record here: https://www.drupal.org/node/2452617