Technical Tip: A workaround for 'Mixed Content' browser error (using FortiADC Content Rewriting)

The 'Mixed Content' browser error is usually due to the respective application code containing resources that use HTTP while the respective website is accessed using HTTPS: Mixed_content

Example:

Browser error:

Application code:

Workaround:

The recommended solution is to change the resources in the application code to use HTTPS instead of HTTP.
However, if the application code change is not possible, it is possible to use FortiADC Content Rewriting feature to add 'Content Security Policy' 'upgrade-insecure-requests' as a workaround.

Step1: Configure the Content Rewriting to add 'Content Security Policy' 'upgrade-insecure-requests'.

Step2: Enable and select the Content Rewriting created in Step1 for the respective Virtual Server:

Related documents:
Upgrading insecure requests

Using content rewriting rules

Configuring virtual servers