Looking for a HTTPS/HTTP mixed content "sniffer" tool

I am hoping someone here can help me out. I am looking for a tool/addon that can point out exact what on the page is triggering a mixed content error. The browser will tell me that something on the page is not secure, but it won't tell me where or what the non secure item is so I can fix it.
Here is my recent example of this problem.
I had a issue with a HTTPS page with a doubleclick tracking pixel on it. It was a standard tracking pixel iframed on to the page and the page iframed was HTTPS with no cert problems. It turned out that the page being iframed has a javascript call that was HTTP and this was triggering the mixed content error.
Unfortunately it took me almost two days to figure out the page being iframed was making the non-ssl call, not anything on the site.
If anyone here could help me find a tool or point to a browser feature that I don't know about that could help me sniff out these mixed content error faster you would make my life so much easier.

You can glean a little more information from Firefox's Browser Console (Ctrl+Shift+j). Mixed content blocks generate a log entry in the security category. If you enter mix in the filter box in the upper right of the console, that should help drill down on the message. (Screen shot example attached.)
Now... you still need to figure out what is generating the request, but hopefully this will help.

Similar Messages

Looking for some best practice regarding Content Administrator access

Hi. I am looking for some best practice or rule of thumb from SAP or from different companies how they address Portal Content Administrator access in Production environment. Basically, our company is implementing portal to work with SAP BW. We are on SP 9. Basically, I am trying to determine if we should have 1-2 Portal Content Administrator in Production with 24/7 access or we should limit them from NOT having this. Can you share with me some ideas of what is right? and what is not?
Should we have access in Production? Or Should we have this access but limited? By the way, our users are allow to Publish BI reports/queries into Production.

Hello Michael,
Refer to this guide about managing initial content in portal.
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/00bfbf7c-7aa1-2910-6b9e-94f4b1d320e1
Regards
Deb
[Reward Points for helpful answers]

How to look for bundle based on its content (actions)?

Hello,
I want to have a list of all bundles that use a specific system variable, for exemple ${NSSREPO}.
It is possible to make an SQL query to do it or do you know a way to get such list?
I do not want to export all bundles on XML files and then look for the string.
Thanks in advance.

micgra,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://www.novell.com/support and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Forums Team
http://forums.novell.com

Looking for an app to display contents of unmounted volumes?

Posting here in SL because that's the OS I'm using on this computer. MacPro 1,1. OS 10.6.8, 10 gig.
I'm doing a major backup of my personal media RAIDset...about 8 TB of home videos, movies, and stuff I want to keep forever.
Ultimately, the backup drives will be taken over to a video house and dumped to LTO tape. Each tape comfortably holds about 1.75 TB, so I'm splitting the 8TB from the RAID across 5 2TB drives.
Here's the problem...I can't mount all 5 backup drives at once, and so I'd like to find some sort of app which can take a snapshot of the volume catalog..basically, I'd like to have the finder window for each volume available, even when the drive isn't mounted. This way, I could see what files I've copied to what drive, without having to mount and unmount drives constantly, just to check what's on each.
Anything like this around? The closest I can get currently is a utility called WhatSize, which creates a column view of a volume, which I can then screen grab. However, I'd like something that behaves like a folder window, with the files and folders available interactively (eg, I can click on a disclosure triangle and see the files/folders within).

Put the text into the AppleScript variable the_text, create a folder named destfolder on the desktop, and run the following:
set target_folder_depth to 0
tell application "Finder"
set target_folder to folder "destfolder" of desktop
repeat with this_paragraph from 2 to (count paragraphs of the_text)
set this_folder_depth to 0
set paragraph_text to paragraph this_paragraph of the_text
repeat
if item 1 of paragraph_text is tab then
set this_folder_depth to this_folder_depth + 1
set paragraph_text to items 2 thru -1 of paragraph_text as string
else
exit repeat
end if
end repeat
if this_folder_depth < target_folder_depth then
repeat (target_folder_depth - this_folder_depth) times
set target_folder to parent of target_folder
end repeat
set target_folder_depth to this_folder_depth
end if
if paragraph_text ends with ":" then
set target_folder to (make new folder at target_folder with properties {name:items 1 thru -2 of paragraph_text as string})
set target_folder_depth to this_folder_depth + 1
else
make new file at target_folder with properties {name:paragraph_text}
end if
end repeat
end tell
(119863)

Mixed Content Error in Application Preview

Apologies if this has already been addressed. I searched the messages but didn't find one covering this issue.
When I run a UI5 application in preview from the Web IDE I am getting the following error when I try to call an OData service via HTTP.
Mixed Content: The page at 'https://webidetestingrxxxnnn.dispatcher.us1.hana.ondemand.com/inde…ashboard&origional-url=index.html&sap-ui-language=en&sap-ui-xx-fakeOS=ipad' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://sapsn1.nnn.com:8000/sap/opu/odata/sap/Z_HR_PEND_APPROVALS_SRV/$metadata?sap-client=020'. This request has been blocked; the content must be served over HTTPS.
I'm checking with the Gateway team to see if we can get the service available via HTTPS, but I was wondering if there was any configuration option in the HCP cockpit or Web IDE to override this restriction.
Thanks,
Dave

How is the service added to the project?
Like Maksim suggested, a destination and mapping can be used. Perhaps you've already have done so, but services can be used to create projects with destination usage from Web IDE templates.
Using an example of an on-premise front-end ABAP system with Gateway components,
Create a service in the on-premise system
Use SAP Cloud Connector to connect the on-premise system with SAP HANA Cloud Platform
Configure a destination for the on-premise system in HCP
Create a project from template (Fiori, SAPUI5, etc) in Web IDE using the destination and service endpoint
The destination and mapping are automatically generated in the project.
Regards,
Scott

Firefox 23 and mixed content

The Firefox 23 release notes claim that mixed content pages are now blocked. The Mozilla Messaging Forum for Thunderbird support has mixed content, but it is not blocked. Why say that sites with mixed content are blocked if they are not? The URL:
http://getsatisfaction.com/mozilla_messaging/topics

Firefox has two prefs to control mixed content.
*security.mixed_content.block_active_content
*security.mixed_content.block_display_content
Only block_active_content is currently set to true by default. block_display_content is still false, so thing like images aren't blocked.
*Web Console (Firefox/Tools > Web Developer;Ctrl+Shift+K)
*https://developer.mozilla.org/en/Security/MixedContent
*http://kb.mozillazine.org/about:config
<pre><nowiki>Blocked loading mixed display content "http://www.mozilla.org/thunderbird/img/tb5/page-background.png" @ https://getsatisfaction.com/mozilla_messaging/topics
Blocked loading mixed display content "http://www.mozilla.org/thunderbird/img/tb5/title.png" @ https://getsatisfaction.com/mozilla_messaging/topics
Blocked loading mixed display content "http://mozilla.org/img/covehead/template/title.png" @ https://getsatisfaction.com/mozilla_messaging/topics</nowiki></pre>

ITunes looking for wrong .xml filename, adding /

Hi,
I have been podcasting for about a year now. However, the last 4 weeks of my show haven't updated on my page and I have found out why...when I click on the information icon it is looking for the filename
http://www.deucecreative.co.uk/upload/traxsource/ts1_podcast.xml/
They have added a forward slash (.xml/) at the end. It is impossible to name a file that way, and I am not sure why it is looking for that filename. Nothing has changed on my xml and it doesn't appear that way anywhere else. I have validated it with feedvalidator and it's fine.
If I subscribe to "http://www.deucecreative.co.uk/upload/traxsource/ts1_podcast.xml" it works correctly, just won't update on the main page.
If anyone has some sort of solution it would be much appreciated. I have already tried to contact their support Thanks.

Hi Greg,
Thanks for replying. I actually tried to add that line it to point it to the correct filename. I see that that xml doesn't validate so I have removed it and re-uploaded a valid one.
http://www.deucecreative.co.uk/upload/traxsource/ts1_podcast.xml
here is a direct link to get a better idea of what it happening..
http://phobos.apple.com/WebObjects/MZStore.woa/wa/viewPodcast?id=271121520
That only goes up to week 61. Should go up to 64. Once you subscribe & try do download you get the ( i ) error message.
If I get <itunes:new-feed-url> to point to a valid xml do you think that might solve the problem?
Thanks again.

Looking for vzw iPhone case similar to Apple's iPad case

I have Apple's case for my iPad. Anyone know of something similar for the Verizon iPhone?
tia, Patrick

Perhaps you'll find what you are looking for at Fatpaint (http://fatpaint.com) - Free online graphic design and photo editing application, specialised in giving you the tools and resources you need for creating designs and illustrations. Them you can view iPhone cases and iPad case with your picture printed on them. The case brand is Speck, and is of great quality.
It is possible to paint, draw make pages and see your pictures on products and buy them, such as: iPhone case, iPad cases, t-shirts, sneakers and much more. Checkout the tutorial videos, it is quite interesting ...
http://youtu.be/YkBnf5NGC8Y?hd=1
http://youtu.be/mnP495V9WHw?hd=1
http://youtu.be/GNctuQ5T858?hd=1
Fatpaint's facebook page:
http://www.facebook.com/fatpaint
What you guys think of it? I have spent 5 years developing this app. I would appreciate any feedback.
Thanks

Mixed content - https vs http

In the browser Chrome, after going to a website starting with https://, it gave me the below message:
Mixed Content: The page at 'https://...' was loaded over HTTPS, but requested an insecure resource 'http://...'. This request has been blocked; the content must be served over HTTPS.
Which is good but in Firefox, it doesn't recognize this issue which should.
Can you please update Firefox browser to recognize the issue and give us a proper message like Chrome does?

I think all browsers allow you to leave a secure page for an insecure page (from HTTPS link to HTTP link) without a warning, otherwise you would go crazy using Google and other search engines that use HTTPS. There is an exception for when a form is being submitted from a secure page to an insecure page: then you definitely should get a warning that your submission isn't being encrypted.
What Firefox and other browsers now pay closer attention to is content pulled ''into'' the page, treating some as high risk (such as scripts) and some as low risk (such as JPEG images). You can adjust Firefox's settings to block this lower risk "display" content if you like. (It requires switching the security.mixed_content.block_display_content preference from false to true in the about:config preferences editor.)

Https site with no mixed content and EV cert is shown as mixed and not identifiying itself

My site https:orderform page contains only https images and website has an EV cert that is valid and current. With history cleared and visiting page for first time Firefox reports that page contains mixed content and that site does not identify iteself.
Hitting F5 to refresh the page address bar correctly shows green with no mixed content popup and that side idenfies itself.
SSLCertificateChainFile has been added and this makes no difference.
Problem does not occur in other browsers (IE, Safari, Chrome).
A new FF profile has been tried but same problem occurs.
Why would refeshing the page work?
Problem affects all firefox browsers 3.5 to 14.01. I dont know about those <3.5.
I have read and tried most suggestions in forum and elsewhere but cant find a solution.
I have not provided the url as this is my order page and its important for me to see genuine visitors.

First a reply to Jsher2000
Thank you for your suggestions. Yes and Yes did this ages ago but no non-https content.
I have found a workaround for what appears to be a bug in Firefox:-(
Here is the non-perfect workaround. First Detect firefox
xUA=navigator.userAgent.toLowerCase()
xFf=xUA.indexOf('firefox')!=-1
if(xFf) top.location.href='https://ord.html'
else top.location.replace( 'https://ord.html' )
The current non-secure page is being replaced with a secure one.
Internet Quote:
"The difference between location.href and location.replace is that the former creates a new history entry on the visitor's browser meaning that if they hit the back button, they can get in a 'redirection loop' which is usually undesirable and may have unwanted side effects."
It appears that FF is using some content (cached) from the previous non-secure page when replacing - leading to the mixed content and non-identified site. An F5 refresh or reload of current page will show that site identifies iteself and there is no mixed content.
In summary its a Firefox Bug.

HTTP 404 - The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.

I have created a web app in our SP 2010 test env. From our dev environment I brought in a content db and attached it to this web app using Mount Powershell command.The command worked without errors.The content db had one site collection in it. When I navigate
to that site I get the error below.I followed the same approach in dev and didn't have any issues.The content DB was migrated from MOSS 2007 site collection.
Please help.
HTTP Error 404.0 - Not Found
The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.
It says the most likely causes are:
The directory or file specified does not exist on the Web server.
The URL contains a typographical error.
A custom filter or module, such as URLScan, restricts access to the file.
This error means that the file or directory does not exist on the server. Create the file or directory and try the request again.
Sreeni

try this trick
open page in web browser and go to view source and check the file that missing

PO 7.4: NW BPM: HTTP Error response for SOAP request or invalid content-type.HTTP 200 OK

Hi Experts
I am trying to call NW BPM scenario(File to BPM) from PI, and using below adapter config.
I am getting below error.
Failed to call the endpoint: Error in call over HTTP: HTTP 200 OK
SOAP: Call failed: java.io.IOException: HTTP Error response for SOAP request or invalid content-type.; HTTP 200 OK
SOAP: Error occurred: com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: HTTP Error response for SOAP request or invalid content-type.; HTTP 200 OK
MP: exception caught with cause com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: HTTP Error response for SOAP request or invalid content-type.; HTTP 200 OK
Transmitting the message to endpoint <local> using connection File_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.io.IOException: HTTP Error response for SOAP request or invalid content-type.; HTTP 200 OK
Any idea how to fix this issue?
Thanks,
Sandeep Maurya.

Hi Sandeep,
Test the URL from your browser and check the proxy settings as well.
Refer the below links
SOAP: call failed: java.io.IOException: invalid content type for SOAP: TEXT
SOAP: Call failed: java.io.IOException: Failed to get the input stream from socket: java.net.SocketException: Connection…
Regards
Bhargava Krishna

When I try to log in to my BC account I get a message that says this"Server Error in '/' Application. The resource cannot be found. Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its nam

When I try to log in to my BC account I get a message that says this"Server Error in '/' Application. The resource cannot be found. Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly. Requested URL: /Admin/Index2.aspx"
Any ideas???

From the Safari menu bar, select
Safari ▹ Preferences... ▹ Privacy ▹ Remove All Website Data
and confirm. Test.

Mixed content - https and http

Guys and Gals -
I have a page that has mixed content - http and https. Users talk to my webserver
using https, which talks to the portal server using http.
The browser popups a warning saying that the site has mixed content. Is there
any way to prevent this warning from coming up? Anything I can do using a proxy
or something else?
Thanks
Niks

Neeraj Harlalka wrote:
It's probably not because your webserver is talking to App server on
http connection. It could be some images being referrenced from the
browser using non-secured protocol. Try using absolute path or code URLs
using jsp tags.
hope it helps
Guys and Gals -
I have a page that has mixed content - http and https. Users talk to my webserver
using https, which talks to the portal server using http.
The browser popups a warning saying that the site has mixed content. Is there
any way to prevent this warning from coming up? Anything I can do using a proxy
or something else?
Thanks
Niks

Looking for web(http) frontend for MySQL

Looking for web(http) frontend for MySQL

The second url is correct, only that the parenthesis became a part of it. Try http://developer.mimer.com , but it doesn't have anything to do with MySQL anyway.
You can always look at Sourceforge (http://sourceforge.net/softwaremap/trove_list.php?form_cat=68 to brows among database front ends).
/Fredrik

Looking for a HTTPS/HTTP mixed content "sniffer" tool

Similar Messages

Maybe you are looking for