Flexible SSL & Wordpress: Fixing “Mixed Content” Errors
Jan 21, 2015David Fritsch
Summary
Introduced protocol rewriting in the Cloudflare WordPress plugin to automatically change HTTP asset links to relative protocols (e.g., `//www.example.com/...`). This resolves "Mixed Content" errors for websites using Flexible SSL, where the connection between the visitor and Cloudflare is HTTPS, but between Cloudflare and the origin server is HTTP. Recommended adding a page rule to redirect all HTTP traffic to HTTPS for comprehensive security.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack