Mixed content
Hi,
I'm currently checking out which browser on Linux gives me the best user experience. While checking out the performance monitor in Firefox, I noticed the following message while petting a bean tree:
Loading mixed (insecure) display content “http://www.glitchthegame.com/img/skills-460/gardening_1.v1428362783.png” on a secure page[Learn More]
main.dart.js:12831:16
[Server Communication] Sending pet to entity: migrate10661 (minified:lS) with arguments: {} 0:13:47
However, this image is accessible encrypted & unencrypted:
[alex@zbox ~]$ curl -I http://www.glitchthegame.com/img/skills-460/gardening_1.v1428362783.png
HTTP/1.1 200 OK
Date: Sun, 10 Mar 2019 11:00:11 GMT
Content-Type: image/png
Content-Length: 21084
...
[alex@zbox ~]$ curl -I https://www.glitchthegame.com/img/skills-460/gardening_1.v1428362783.png
HTTP/2 200
date: Sun, 10 Mar 2019 11:00:16 GMT
content-type: image/png
content-length: 21084
...
As I'm not familiar with Dart or the codebase, I can't tell exactly from where this asset is being loaded.
As some browsers do not allow the usage of mixed content, this might lead to usability issues.
Hope that helps, Brianbrainerz.