In This Article

Why does my browser say my page is not secure?

What is "mixed content" and why should I care?

If you're viewing your site over HTTPS and notice that some content is missing (such as embedded videos or search boxes), that likely indicates a mixed content error. A mixed content error occurs when a page attempts to load content with an HTTP source on a page being viewed over HTTPS. In order for the browser to ensure that your connection remains secure, the content will be blocked and your browser will indicate that the page contains insecure content (i.e. the browser will show a "Not Secure" label or icon next to the page URL).

To prevent this from happening, you will either need to change the content's source URL to HTTPS, or remove the content from the page. This can include things like:

  • Images in custom headers or footers
  • Embedded pages or widgets inside of iframes (this includes pages displayed in LibWizard tutorials)
  • Embedded widgets, such as videos or catalog search boxes (the HTML code for widgets often contains external images, stylesheets, and JavaScript files).
  • Form elements (specifically, action attributes that point to http:// URLs or that have onsubmit handlers using <script> elements with an http:// src URL).
  • External stylesheets (e.g. in your site's Custom JS/CSS code)
  • External JavaScript files (e.g. in your site's Custom JS/CSS code)

In order for a browser to completely consider a page secure, you must ensure that it does not contain any mixed content. If any of your embedded content can support being loaded over HTTPS, then update its source URL to use https:// instead of http:// before enabling HTTPS for your site.

If a piece of embedded content does not support HTTPS at all, however, please contact the content provider or vendor to see if they can provide HTTPS-compatible code. Otherwise, you may want to consider removing the content from your guides until you can find a secure alternative.

Mixed content does not include links. If you have a link (i.e. <a> element) pointing to a URL starting with http://, this does not count as mixed content to a browser. Although we do recommend that you update these to start with https:// if the destination sites support it, the links will still appear normally and won't result in a mixed content error.

HTTPS Required: What does it mean? What do I need to do?

Check out the video below to learn more about making sure your content is HTTPS-friendly.


How can I find content that is loading from http:// URLs in LibGuides?

Media/Widget assets

When embedding external content in your guides, we always recommend that you use Media/Widget assets. Not only is it easier to manage and reuse these compared to Rich Text/HTML content items, but they also have an added advantage: you can quickly and easily filter them in your Assets library.

  1. Log into LibGuides and go to Content > Assets.
  2. Under the Content Items tab, apply the following filters:
    1. Set Type to Widget.
    2. In the Description / Metadata field, enter: http:
  3. Click the Filter button. This will look for all Media/Widget assets that contain "http:" somewhere in their HTML code.

content items filters

  1. Once the list updates, click on the Mapping Count column heading twice to sort it in descending order.
    • The mapping count indicates how many guides are currently using an asset.
    • By sorting in descending order, you can more easily find and fix the assets you're actively using (and delete the ones you no longer need!).
  2. To view and edit a Media/Widget asset's code, click on its Edit () icon in the Actions column.
    • System-level Admin users can edit all assets.
    • Other users can only edit the assets they own unless they're a Regular-level user with the Manage Assets permission (which is a CMS-only feature).
    • For more info, see our overview of LibGuides account permissions.

sorting the mapping count in descending order

Rich Text/HTML content items

Although we do not recommend it, it is possible to embed HTML code in a Rich Text/HTML content item. Unlike Media/Widget assets, however, these are not listed in your Assets library. However, you can still use the Search & Replace tool to look for affected content. Here are some suggested steps to help you locate content that may need to be updated (see the list at the top of this article for the types of content to look for):

  1. Log into LibGuides and go to Tools > Search & Replace.
  2. Set the Search Type to Content Item.
  3. Enable the Description checkbox.
  4. In the Search For field, enter: http:
  5. Set the Match Type to Contains.
  6. Set the Case Type to Insensitive.

search & replace tool settings

  1. Click the Search button.
    • Keep in mind that this will search all the content inside of your Rich Text/HTML content items -- including links (<a> elements).
    • Although you're welcome to update links as you find them, the content you want to focus on to prevent mixed content errors are the following:
      • Images (excluding images you've added via your LibApps Image Manager -- those will be ok)
      • Embedded widgets (like a catalog or discovery service search box) or videos
      • Content being displayed inside of <iframe> elements (look for the URL in src attribute)
      • Forms (look for the URL in the action attribute in <form> elements)
      • External CSS files (specifically, action attributes that point to http:// URLs or that have onsubmit handlers using <script> elements with an http:// src URL)
      • External JavaScript files (look for the URL in the src attribute <script> elements)
    • Pro tip: after running your search, press CTRL + F and use your browser's Find in Page tool to more easily look for the above elements and/or attributes in the search results.
      • For example, try entering src= or <script and your browser will highlight those on the page and allow you to easily navigate through all matches.

example of a browser's find in page tool highlighting matches on screen

  1. To edit a content item, click on its Asset ID. This will open the guide page containing the content item in a new browser window, allowing you to modify it.

clicking an asset ID link in the search results

Related Articles