CODEWITHSUNDEEP
javascriptangularjsajaxhttps
Joshua Paul
Joshua Paul

Reputation: 99

The page was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint

I am calling a rest API from Https deployed Application to Http Rest API. I have written the logic in JavaScript by using Angular Js framework. The web service call got failed with the below message.

The page at 'https://********someurl****' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint

Requesting if any one can help me get out of this error.

Upvotes: 8

Views: 58807

Answers (4)

Pravin Desai
Pravin Desai

Reputation: 555

In my case chrome was causing the issue, don't know why, other browsers work fine.

**Tip: I wasted two days trying to find out the cause, hope this will help someone.

Upvotes: -1

Jack
Jack

Reputation: 951

If you are unable to switch to https, another solution is to set up a server side end point which you access via https, which then makes the call to the http url and returns the result. In other words, making your own little HTTPS proxy to the http resource

Upvotes: 1

Pankaj Shinde
Pankaj Shinde

Reputation: 3699

Workaround:

1- Click the shield icon in the far right of the address bar.

enter image description here

Allow mixed content in Google Chrome

2- In the pop-up window, click "Load anyway" or "Load unsafe script".

If you want to set your Chrome browser to ALWAYS(in all webpages) allow mixed content:

1- Close Chrome. Chrome must be fully closed before the next steps.

2- Right-click the Google Chrome desktop icon (or Start Menu link). Select Properties.

3- At the end of the existing information in the Target field, add: " --allow-running-insecure-content" (There is a space before the first dash.)

4- Click OK.

5- Open Chrome and try to launch the content that was blocked earlier. It should work now.

This is just workaround and you need to solve by securing both app and rest api.

Upvotes: 15

klugjo
klugjo

Reputation: 20885

Use an https endpoint for your Rest API, otherwise you will end up with mixed content

  • HTTPS is important to protect both your site and your users from attack.
  • Mixed content degrades the security and user experience of your HTTPS site.

Upvotes: 1

Related Questions