Mixed content checker

What is checked

An HTTPS page's HTML is scanned for any http:// resource reference, split into the two categories browsers themselves distinguish: blockable (scripts, stylesheets, iframes, objects - a modern browser refuses to load these at all) and passive (images, video, audio - loaded but flagged insecure in the browser's address bar).

Static HTML only

This scans the HTML as delivered by the server. A resource inserted purely by client-side JavaScript after the page loads is not visible to a static scan and will not appear here - a real limitation worth knowing about for JavaScript-heavy pages.