# How to fix mixed content

> An HTTPS page that loads images or scripts over http:// shows broken images and blocked scripts. Update the URLs.

Security · HTML version: https://getreport.app/learn/mixed-content

## Mixed content

Passing looks like: No resources load over http://.

**Why it matters.** Browsers block http:// scripts and stylesheets on an HTTPS page, which breaks layout or features, and upgrade http:// images and media to https, showing them broken when that fails. It usually appears after a move to HTTPS while old absolute URLs stay in the content.

**How to fix it.**

1. Search and replace http:// with https:// in content, theme and configuration (WordPress: a search-replace plugin covers the database).
2. Add Content-Security-Policy: upgrade-insecure-requests as a safety net.

Check your own page: https://getreport.app/