HTTP URL Won't Open From HTTPS Site

Page: 1

Author Post
Member
Registered: Nov 2015
Posts: 4
My website is a secure HTTPS hosted Wordpress blog. If I call a non secure HTTP website URL to open in a floatbox from a text link, the FB opens but it's blank/no content & doesn't throw an error. The HTTP URL is correct & works in Safari/Mac but not if called as a FB window from a text link on a Wordpress post page. If I try to click on the showNewWindow icon on the bank FB it goes to "about:blank" rather than the actual URL in the link.

Ex: <a href="http://powells.com" class="floatbox" data-fb-options="showOuterClose:true autofit:true boxScroll:true showNewWindow:true enableDragResize:true">Powell Books</a>

On the same post page there are a few HTTPS website links that I also use FB to view & they work fine.

Ex: <a href="https://www.dougfirlounge.com" class="floatbox" data-fb-options="showOuterClose:true autofit:true boxScroll:true showNewWindow:true enableDragResize:true">Doug Fir</a>

Is this a Mac Safari/Chrome security "thing" or is there some way to work around it in FB?

I've been working on this for over an hour. Was able to get HTTPS links to work in FB not HTTP links.

Any ideas or a workaround?

https://www.go2jo.com/medical/sarcoidosis/drive-175-miles-in-my-shoes/
Administrator
Registered: Aug 2008
Posts: 3350
Apologies for the slow response.

Welcome to the new world of security in modern browsers. They all will no longer bring insecure (http) interactive content into a secure (https) site, for the obvious reason that this negates the assurances offered by the site certificate and encryption.

You may see a message in the browser's address bar about the blocked content. You will most certainly see the message in the browser's developer console.

It's nothing to do with Floatbox, and there's nothing that Floatbox can do to bypass it.

See https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content for more detail.

Page: 1