Insecure Fonts causing security warnings to customers :-(

Hi Guys

I went through a round up maintenance on one of my sites today and, in smoke testing after a Joomla / eShop point update, I noticed Chrome complaining about insecure scripts. (site is configured as https).

Investigating, I found that on content pages and, more critically, the checkout pages, there are multiple calls to fonts.gstatic.com over http from both jquery and mootools.

Initially, customers see a warning like this....



If they opt to allow scripts, they will then see this dire warning (not ideal on an eCommerce site!);



Here are partial grabs from developer tools. I had a look at some of the http links and all are available as https. Can this be resolved in a future release?

Hello Peter,

Please submit a new ticket to EShop category to send us the your site information so our support staff can help you to check.

Sincerely, Giang

Fixed within 10 minutes of raising the ticket. Amazing job guys!

OK no problem Peter!