Contrib.social

Mixed Content: The site at 'https://mysite.com' was loaded over a secure connection) File export URLs served over HTTP in Views Data Export causes mixed content issue

Open on Drupal.org →
Created on 27 January 2025, 2 months ago

Problem/Motivation

When exporting files using the Views Data Export module, the file download URL is being served over HTTP instead of HTTPS, even when the site is loaded over HTTPS. This causes browsers to block the file download due to mixed content issues.

Steps to reproduce

  • Set up a Drupal site with the Views Data Export module enabled.
  • Create a View with a "Data Export" display.
  • Access the View over HTTPS and export the file.
  • Check the file download URL in the browser's developer console.
  • Expected Behavior
  • The file download URL should use HTTPS when the site is loaded over HTTPS.

Actual Behavior

The file download URL uses HTTP, causing mixed content errors and blocking the file download.

Relevant Browser Error

Mixed Content: The site at 'https://qoa-dev.applab.qa/' was loaded over a secure connection, but the file at 'https://qoa-dev.applab.qa/system/files/views_data_export/diploma_applicaions_data_export_2/1-1737959520/Diploma-Applications-2025-01-27T06%3A32%3A00%2B0000.xlsx' was redirected through an insecure connection. This file should be served over HTTPS.

Environment

  • Drupal Core: (e.g., 10.x or 9.x)
  • Module Version: (e.g., 8.x-1.0)
  • PHP Version: (e.g., 8.1.x)
  • Browser: (e.g., Chrome 115, Firefox 116)

Proposed Solution

The issue can be fixed by ensuring that file URLs generated by the module respect the site's HTTPS configuration.

Code Changes

In the module's file handling logic, replace:

$url = \Drupal::service('file_url_generator')->generateAbsoluteString($results['vde_file']);

With:

$url = \Drupal::service('file_url_generator')->generateAbsoluteString($results['vde_file']);
$url = str_replace('http://', 'https://', $url);

This ensures the file URL always uses HTTPS.

Patch

A patch is attached to resolve this issue.

🐛 Bug report
Status

Needs review

Version

2.0

Component

Code

Created by

🇵🇰Pakistan Mansoor Aziz

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024