Technical Tip: A workaround for 'Mixed Content' browser error (using FortiADC Content Rewriting)

[Khidzir_MN]

Description	This article provides a workaround for the 'Mixed Content' browser error observed when accessing a website onboarded through FortiADC Virtual Server/
Scope	FortiADC and FortiADC-VM
Solution	The 'Mixed Content' browser error is usually due to the respective application code containing resources that use HTTP while the respective website is accessed using HTTPS: Mixed_content Example: Browser error: Application code: Workaround: The recommended solution is to change the resources in the application code to use HTTPS instead of HTTP. However, if the application code change is not possible, it is possible to use FortiADC Content Rewriting feature to add 'Content Security Policy' 'upgrade-insecure-requests' as a workaround. Step1: Configure the Content Rewriting to add 'Content Security Policy' 'upgrade-insecure-requests'. Step2: Enable and select the Content Rewriting created in Step1 for the respective Virtual Server: Related documents: Upgrading insecure requests Using content rewriting rules Configuring virtual servers