Mozilla Firefox 23 Will Block Mixed SSL Content

If you have a site running on SSL (HTTPS) that loads content from non-HTTPS URLs, you should be aware of this change in Firefox 23.

By default, Firefox 23 will block any content loaded from non-HTTPS addresses on an HTTPS page.

For example, a script referencing https://code.jquery.com/jquery-1.10.2.min.js will not work if code.jquery.com cannot be reached over HTTPS. However, the CDN ajax.googleapis.com supports SSL, so you can use that as an alternative.

If you want to disable this setting, you can do so via about:config:

security.mixed_content.block_active_content

Change the value from true to false to disable the block. (This is shown here as an example only — it is generally not recommended to disable this security feature.)