How to find the reason why my page gets the browser alert: "Your connection to this site is not fully secure"?

[hjeror]

For about two weeks I have been seeing an error on certain pages of my site that says “Your connection to this site is not fully secure”. It is only on random pages and appeared one day without any changes to my site being made. As an example we can use https://www.defelsko.com/about-us as a problem page.

When inspecting the page and viewing the source code, I believe I have traced the issue back to the same broken image somehow being served on all of the pages showing this warning.

The strangest thing is that it is only on certain pages and I can’t seem to find a reason for it to be on some over others. I had initially thought it would appear specifically only on pages that that link to a Collection, but then pages like https://www.defelsko.com/whats-new are completely secure and all of the content on that page pulls from a collection so that debunked my theory.

I do vaguely remember accidentally copying and pasting that image from our old site when our new one was being made (a year and a half ago) but on everything I can see it has been replaced and I can’t tell where it is being pulled from. When viewing the source code of the page and going to line 51, I can see that the image was associated with what appears to be an item from my FAQ collection titled “What zero plates used for?” - but based on the missing word and the fact that I can’t find that item anywhere in my Designer, I have to assume I’ve deleted it or edited it. So why is it still showing in my source code and messing up the security on my site?

It’s frustrating when I can see something in the code but can’t find it in the Designer.

---

Here is my site Read-Only: https://preview.webflow.com/preview/defelsko?utm_source=defelsko&preview=67a77cb9ca5c807501669fe7749659c0

[vincent]

This happens when you use unsecure resources in a secure https page. Depending on the gravity of the resources linked, the page is blocled or has different levels of warning. Yours has the lowest serious warning.

Inspect the page to find the faulty resource. For instance you’re linking to a http image somewhere.

[hjeror]

Hi @vincent, thank you for your response. I understand that when there is a faulty resource it will pull up a security error. But as I mentioned above, I can’t figure out where that image is. I can see it in the code and I can see it in the errors, but I can’t figure out how to remove it because I cannot find it in the Designer.

How would I locate something that I can see in the code but can’t see in the Designer?

[Phoxic]

Looks like there’s a hidden popup element at the bottom underneath the footer, see below. Is this from custom code on your Webflow site? (i.e. it won’t show up in the Designer, but will on the published site)

[HHJA]

I am getting a warning that my site is not secure as well and was just checking the site and came across this thread. At www.hunthalejones.com and it says > This server could not prove that it is www.hunthalejones.com ; its security certificate is from *.webflow.io . This may be caused by a misconfiguration or an attacker intercepting your connection.

Any ideas on where to fix this? I did the security search in developer and found no warnings.

[hjeror]

Dave from Webflow Priority Support was able to find my problem! The offending photo was hiding in a rich-text field of one of my collections.

@Phoxic Yes, that is custom code for those pop ups which are populated by the collection the issue was in so that would make since why they might appear suspect when inspecting my pages.