Mixed content: HTTP on HTTPS page

HTTPS page with HTTP resources inside — Mixed Content error.

Types

Passive (images) — browser shows but no lock. Active (JS/CSS) — doesn't load.

Fix

SQL replace http → https in DB. Or // (protocol-relative).

CSP

upgrade-insecure-requests header.

Finding

Chrome DevTools Console, whynopadlock.com.