How to solve the problem with "Mixed HTTPS content"?

Question

Nginx

Hello. There are scripts and styles that are loaded to the site (on which https) from the usual http. Are there any live hacks to avoid the "Mixed HTTPS content" error? Or just raise https on the server where do these files come from?

Thanks in advance.

Answer 1

Image scripts and other things loaded via http can still be replaced by intercepting user data or changing the page - this feature makes https meaningless on the page.
Therefore, yes, everything needs to be given over https. Pictures from third-party services can be proxyed through yourself.