2.0 https mixed content issue

[AndreaF]

Thanks. I had one non-secure image in there. All good now.

[CnP.Support]

Good day AndreaF

Please see a client's form that we just checked: https://connect.clickandpledge.com/w...3-660a309a788d

as you see the SSL is quite valid and the issue you are seeing is not happening with this form.

[CnP.Support]

Good day AndreaF

The issue is with the content you have added to the footer. The following are the samples of each form without any alteration. I simply opened each form and saved it as a new name. Here are the links:

1. https://connect.clickandpledge.com/w...4-ccd42b2479e6
2. https://connect.clickandpledge.com/w...5-c1521f67e2de
3. https://connect.clickandpledge.com/w...5-b96ea63b8bdb
4. https://connect.clickandpledge.com/w...0-b751bd537e9d
5. https://connect.clickandpledge.com/w...9-e0dfc511e2a7
6. https://connect.clickandpledge.com/w...e-78f66793659a

The following is the SSL check in Chrome:





The following is the SSL check from Firefox:



Also the SSL check from a third party site shows the following:


In reviewing your page I see the following:

Based on what I see the issue is with the "Thank You" page content you have added. Please check the text in the Thank you section.

I strongly recommend that you remove any code that you have added and test the page. Once you have a clean page with proper SSL then add the code and determine which aspect of what you are adding is causing this.

Please note that the reference to http://www.w3.org/2000/svg needs to be changed to https://www.w3.org/2000/svg -- that may help. I have not tried to add your code to a page and figure out what changes need to be made but I suggest you start with that line.

Please let us know if we can be of more help.

[AndreaF]

I spoke to Kamran about this on the Support hour a few days ago, but wanted to register it here so I can be notified when the issue is resolved.

The issue is that on our new Click & Pledge 2.0 Payment form, it's coming up as "non-secure" on all browsers due to the presence of active mixed content. I believe it was caused by non-secure font calls in the page source.

We don't want to lose trust with our donors, so we prefer not to go live with our new form until this is resolved. We also don't want phone calls from donors complaining about the non-secure nature of the form as our limited office staff won't understand how to handle that type of inquiry.

Our form = https://connect.clickandpledge.com/w...b-597dee827a17

Thanks in advance for looking into this.
Andrea