I’m seeing this warning in the console when browsing to
myfitnesspal.com:

[JS] (https://www.myfitnesspal.com/:361) Mixed Content: The page at
'https://www.myfitnesspal.com/' was loaded over HTTPS, but requested an
insecure image
'http://d34yn14tavczy0.cloudfront.net/images/ua_shop_logo.png'. This
content should also be served over HTTPS.

This explains the warning in the address bar. Loading insecure content
over a secure connection kind of defeats the point of serving content
over HTTPS in the first place.

The second warning is completely unrelated, it’s due to that particular
website parsing the UA string to detect what browser it’s running in, an
error-prone and deprecated (although still widely used) practice. Not
much we can do about that, unfortunately.

** Changed in: webbrowser-app (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1560673

Title:
  Dangerous content?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/webbrowser-app/+bug/1560673/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to