Fontdeck JS SSL error

[smete135]

After seeing the error message that some unsafe scripts weren’t loaded, I checked my inspector and saw this:

Mixed Content: The page at ‘https://aponia.com.tr/’ was loaded over HTTPS, but requested an insecure script ‘http://f.fontdeck.com/s/css-ssl/js/aponia.com.tr/29651.js’. This request has been blocked; the content must be served over HTTPS.

How can I resolve this without breaking anything?

[Mohammad – SUPPORT]

Hi,
Please check it now and let me know your feedback.
Thanks
Mohammad

[smete135]

Hi Mohammad, I don’t see anything different. What did you change?

[Mohammad – SUPPORT]

Hi,
Where did you insert code for fontdeck? Please provide me screenshot of error.
Thanks
Mohammad

[smete135]

I didn’t insert any code. This is your theme in its default configuration.
Screenshot attached.

Attachments:

You must be logged in to view attached files.

[Mohammad – SUPPORT]

Hi,
Try to check it again.
Thanks
Mohammad

[smete135]

It’s gone now, thanks!

[Mohammad – SUPPORT]

Hi,
You most welcome and glad to help you.
Thanks
Mohammad

[unicco]

I’m receiving the same error on http://f.fontdeck.com/s/css-ssl/js/webshopudstyr.dk/29651.js, see attachment.

Attachments:

You must be logged in to view attached files.

[David Martin – Support]

Hi,

Please open your htaccess file in the WP root. Inside this add:

<FilesMatch ".(eot|ttf|otf|woff|svg)">
	Header set Access-Control-Allow-Origin "*"
</FilesMatch>

Thanks.

[unicco]

I’m using nginx

[David Martin – Support]

In that case:

# nginx config
if ($filename ~* ^.*?\.(eot)|(ttf)|(woff)|(svg)$){
	add_header Access-Control-Allow-Origin *;
}

Thanks.

[unicco]

Your nginx-conf wont execute; course it aren’t executeable – aren’t you trying things out, before replying?

Guess you mean:

location ~* \.(eot|ttf|woff|woff2|svg)$ {
    add_header Access-Control-Allow-Origin *;
}

But doesn’t work for http://f.fontdeck.com/s/css-ssl/js/webshopudstyr.dk/29651.js

What is 29651.js? And why is it even using an external fontdeck reference? I’m unable to grep it from your sourcefiles.

[unicco]

Maybe it’s due to Fontdeck is retiring, and the destinations aren’t available anymore?

Fontdeck is Retiring

Attachments:

You must be logged in to view attached files.

[David Martin – Support]

Hi,

The code above is to help load the icon fonts over the https/http domain origin error you are seeing.

The font deck JS code is part of their code they use to load in your fonts, it’s not something we control.

Thanks,
David.