sus.botdocs

Security finding

The page references files with a protocol-relative address

Security Info Severity: Low

Part of the audit Mixed content and insecure forms. Finding id: security.protocolRelativeResources.

What it costs you

Such an address copies the scheme of the page. On HTTPS that is harmless. If the page is ever opened over HTTP, the files load over HTTP too and can be changed on the way.

What to do

Write https:// in front of these addresses.

What it checks

  • File loaded without a fixed HTTPS address

How to fix it

Write the scheme out

  1. Search the templates for src="// and href="// and put https: in front.

How to check: View the page source: no src or href starts with //.