Convert ASP.NET MVC web application from http to https

Question

I have ASP.NET MVC web application in http I want to convert it to https. I have change in code from http to https but after deployed on internet I had some javascript library errors , example :

Mixed Content: The page at 'https://MySite/' was loaded over HTTPS, but requested an insecure script 'http://code.jquery.com/jquery-2.1.3.min.js'. This request has been blocked; the content must be served over HTTPS.

What is solution?

The solution is to reference the https version of this dependency in your script tags instead of the http version - e.g. code.jquery.com/jquery-2.1.3.min.js — SpruceMoose
– SpruceMoose, Commented Jul 12, 2018 at 8:41
Just reference the https version instead of the http version - How to fix a site with mixed content — Pete
– Pete, Commented Jul 12, 2018 at 8:42

trashr0x · Accepted Answer · 2018-07-12 10:07:41Z

When HTTPS is enabled, all your assets have to be requested over HTTPS as well, otherwise you get mixed-content warnings as both secured and unsecured elements are being served up on a page that should be completely encrypted. Switch to HTTPS:

<script src="https://code.jquery.com/jquery-2.1.3.min.js"></script>

You can also use protocol-relative URLs, i.e. instead of:

<!-- this.. -->
<script src="http://code.jquery.com/jquery-2.1.3.min.js"></script>
<!-- ..or this -->
<script src="https://code.jquery.com/jquery-2.1.3.min.js"></script>

You can instead use:

<script src="//code.jquery.com/jquery-2.1.3.min.js"></script>

Using the protocol-relative syntax, the resource will load in HTTP when requested from a non-secure page, and HTTPS when requested from a secure one.

The downfall to this is that using protocol-relative schemes on non-secure pages will retrieve cross-origin assets in a non-secure fashion. This means that you could be missing out on benefits that HTTPS provides when requesting (for example) resources from a CDN, such as receiving the assets over HTTP/2*. As you're going full HTTPS this is not an actual concern, so use it at your own discretion.

_{*HTTP/2 does not require the use of encryption (e.g. TLS), but some implementations have stated that they will only support HTTP/2 when it is used over an encrypted connection, and currently no browser supports HTTP/2 unencrypted. (HTTP/2 FAQ)}

fdomn-m · Accepted Answer · 2018-07-12 08:48:25Z

1

When you have an https site you should load all your JavaScript content (if they're external links) through https

reference:

https://code.jquery.com/jquery-2.1.3.min.js

instead of:

http://code.jquery.com/jquery-2.1.3.min.js

The answer is as simple as that!

edited Jul 12, 2018 at 8:48

fdomn-m

28.8k8 gold badges39 silver badges70 bronze badges

answered Jul 12, 2018 at 8:43

Josh Stevens

4,2811 gold badge20 silver badges24 bronze badges

1 Comment

Josh Stevens Over a year ago

if you go to it on the browser it loads fine.. which means it is loading the JavaScript.

Collectives™ on Stack Overflow

Convert ASP.NET MVC web application from http to https

2 Answers 2

Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related