Web Security · Junior · Question 10 of 75
An HTTPS page loads a script over plain http://. What happens in modern browsers?
- 1The browser upgrades the whole page to HTTP
- 2The script runs, but the address bar turns green
- ✓Correct answer: The script is blocked as mixed content, because it could be modified in transit
Explanation
An active resource loaded over HTTP could be swapped by anyone on the network, which would break the page's security. Browsers block it; some passive content is auto-upgraded to HTTPS.