Browser showing insecure content due to Google Font link

[lisabee]

We are using the Weaver Xtreme Google Font Lora and it shows the link in our source code as “<link href=’http://fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic&#8217; rel=’stylesheet’ type=’text/css’>”. The problem is the link is showing as a http and we are running https, this causes Firefox and Chrome to throw a warning in the address bar that some of the website content is insecure. Where can we change the google font link to utilize https instead of http?

[Weaver]

This is very odd since the code generated by Weaver Xtreme Plus would be:

<!– Weaver Xtreme Plus Google Fonts –>
<link href=’//fonts.googleapis.com/css?family=Lora:400,700,400italic,700italic’ rel=’stylesheet’ type=’text/css’>

It does not generate href=’http://fonts.google…&#8217;, but simply the ‘//fonts.google…’. Using // is a widely used method for eliminating the need for http: or https: and will automatically conform to either of those two depending if the site is secure or not.

In fact, if you use CloudFlare (and everyone should!), the WordPress CloudFlare plugin automatically changes ALL “http://&#8221; and “https://&#8221; to simply “//” before the site is delivered from the server.

Can you provide a link to your site?

[Weaver]

@lisabee –

Please upgrade to Weaver Xtreme Plus 1.1. It does look like the old version may have used ‘http:’.

[lisabee]

Hmmm … that’s odd. I have Weaver Xtreme Plus updated to version 1.1.  You can view the source code at https://www.mountainhomedetailing.com.

[Weaver]

Ah – I think I have this figured out. Delete Lora from the fonts tab, save settings, then re-add it. The http: is added during the save process. So deleting and re-adding will use the new address fromat. (I hope!).

[lisabee]

That worked! Thank you!

[Author]

Posts