Mixed Content Checker
Paste page HTML and flag plain-http resources that would load insecurely on a secure page.
Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.
Mixed Content Checker
How to use this tool
- Enter your values in the fields above.
- Press Generate to see the result.
- Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.
Worked example
An image tag with a plain-http source is flagged as one mixed-content resource, while a protocol-relative script is not flagged.
What this tool does not do / Limits
This tool only scans HTML you paste for src and href values using the plain scheme. It does not fetch a live page, and it cannot see resources loaded later by scripts.
Frequently asked questions
Does this fetch my live page?
No. Paste the HTML yourself; nothing is fetched or checked live.
Why is a protocol-relative reference not flagged?
It follows the page own scheme, so on a secure page it loads securely too.
Related tools
JSON Studio
Format, validate, minify, query and compare JSON in your browser, with precise line-and-column errors.
LiveRegex Tester
Test patterns against sample text with match highlighting, capture groups and a safe one-second timeout.
LiveSecurity Header and DNS Checker
Check HSTS, CSP and other security headers, TLS details, and DNS/email authentication records (SPF, DKIM, DMARC).
Live