mixed_content_reference

Active HTTP references on HTTPS

AuditLume examines one public response and its initial HTML. It does not perform a complete site audit.

Indicative impact: 6/100 · security

Observation confidence: High

What it detects

Looks for explicit http URLs in active-resource attributes.

AuditLume examines one public response and its initial HTML. It does not perform a complete site audit.

Why it may matter

The signal helps prioritise a review because it may affect understanding, privacy, accessibility or technical protection. Its impact is indicative and must be interpreted in the page’s real context.

How to verify manually

Open the final URL and inspect the initial HTML and response headers with browser developer tools or curl. Repeat the check on representative templates and routes before drawing a conclusion.

Looks for explicit http URLs in active-resource attributes.

Cautious correction

It observes no real requests, CSP upgrades or JavaScript-created resources.

Rule limitation

It observes initial HTML only; it runs no JavaScript and does not replace manual review.

What it does NOT prove

This signal alone does not certify legal compliance or non-compliance, GDPR, WCAG or EAA; it is not a human or professional security audit and does not prove the presence or absence of all risk.