10040—Secure Pages Include Mixed Content

PUBLISHEDsecurity alertLow

Passive

Metadata

Alert ID:: 10040
Risk:: Low
Type:: Passive
CWE:: CWE-311Missing Encryption of Sensitive Data

摘要

The page includes mixed content, that is content accessed via HTTP instead of HTTPS.

解决方案

A page that is available over SSL/TLS must be comprised completely of content which is transmitted over SSL/TLS. The page must not contain any content that is transmitted over unencrypted HTTP. This includes content from third party sites.

其他信息

tag=img src=http://example.com/file

参考

browse all alerts