http request has been block from https

This is a mixed content warning and is a bad practice. See below from mozilla

When a user visits a page served over HTTPS, their connection with the
web server is encrypted with TLS and hence safeguarded from sniffers
and man-in-the-middle attacks.

If the HTTPS page includes content retrieved through regular,
cleartext HTTP, then the connection is only partially encrypted: the
unencrypted content is accessible to sniffers and can be modified by
man-in-the-middle attackers, and therefore the connection is not
safeguarded anymore. When a webpage exhibits this behavior, it is
called a mixed content page.

You should either;

  • Modify to use the https endpoint or
  • proxy the request as https.

Leave a Comment