¿Qué es el Contenido Mixto?
Mixed content occurs when an HTTPS page loads resources (images, scripts, stylesheets) over HTTP. This compromises the security of the encrypted page because the unencrypted resources can be intercepted and modified by attackers. Modern browsers block active mixed content and warn about passive mixed content.
Cómo Funciona
When a browser loads an HTTPS page, it expects all sub-resources to also use HTTPS. If a script, iframe, or API call uses HTTP, the browser blocks it (active mixed content). Images and media loaded over HTTP generate warnings but may still load (passive mixed content).
Por Qué Importa
Mixed content undermines HTTPS security. A single HTTP-loaded script can be hijacked to steal cookies, inject malware, or redirect users. Fixing mixed content is essential for maintaining a fully secure website and avoiding browser warnings.
Problemas Comunes
- Hardcoded HTTP URLs in page templates
- Third-party widgets loading assets over HTTP
- CMS-generated content with absolute HTTP URLs
- CDN resources not configured for HTTPS