• Resolved anderslinn

    (@anderslinn)


    When checking mozilla observatory I get the following issue:

    -50 Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via src=”//…”

    Now SRI is not an option but scripts should load over https.
    It seems to be pagead2.googlesyndication.com according to hosting.
    I cant see the issue in network tab , everything seems to use https to me.

    Any idea?

    The page I need help with: [log in to see the link]

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support James Osborne

    (@jamesosborne)

    Thanks for reaching out. While not familiar with SRI setups here in Site Kit plugin support this seems to be a a security feature and not something that can be added via the plugin. From further checks it seems it may not as easily achievable using a CMS such as WordPress, with one recent track ticket closed on this topic. While I will check this with the team I don’t think this is something that can be achieved on the plugin side.

    In relation to the “resources loaded over http” notice all Site Kit resources, including to Google services are requested over https. I therefore don’t expect these are Site Kit specific. For the non secure ads you mentioned I don’t see this when checking your site at present however the product experts at the AdSense Help Center should be able to assist with this. If you’re able to determine any specific not https ad you can also restrict ads or ad networks from being served at AdSense level.

    While you may have further recommendations in relation to your website security do you encounter any errors or warnings when using the Site Kit plugin? I do see some browser console errors, although they don’t seem Site Kit specific.

    Plugin Support James Osborne

    (@jamesosborne)

    As we didn’t receive a response I’ll mark this as resolved. Feel free to open a new support topic if you continue to encounter issues, or reopen this topic and we’d be happy to assist.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Ads loaded insecure’ is closed to new replies.