One - Joomla 3 Onepage Portfolio Template loads unsafe scripts when run on SSL

Hello everyone, I bought One - Joomla 3 Onepage Portfolio Template off the Themeforest stie.

I am running the secure site and I get the message (or an icon in the browser address bar) that the main (One) page is trying to load scripts from unauthenticated sources. Further investigation showed that this normally happens when your site is running on https and there are some calls to http. In our case the template is trying to load the following css: fonts.googleapis.com/css?family=Open+Sans:400,700 '.

Please advice how i can remove the reference to unsecured sources or maybe load this css from HTTPS as oppose to HTTP.

Thanks in advance

Valeri

Hi marval1,
Thanks for contacting us and choosing our product!
About your question our template load font from google and you can don't worry about sources.
In this case can download this fonts and load from your server!
You can do that as this tutorial:
www.t3-framework.org/documentation/bs3-customization#add-fonts
Hope this help!

Hello

Thanks for the suggestion.

First of all, strangely enough, even if I remove a reference in Noone_v2/etc/assets.xml file to the
<file> fonts.googleapis.com/css?family=Open+Sans:400 </file>
<file> fonts.googleapis.com/css?family=Open+Sans:700 </file>

I still can see in the source of the page reference to <link href=' fonts.googleapis.com/css?family=Open+Sans:400,700 ' rel='stylesheet' type='text/css'>. Which makes me believe that it might be loaded from somewhere else. Or alternatively I was wondering why I am not able to use something like <file>HTTPS://fonts.googleapis.com/css?family=Open+Sans:700</file> to avoid the mixed sources on a site running on HTTPS?

I also tried to follow the link: www.t3-framework.org/documentation/bs3-customization#add-fonts .

When I go to google website to download the fonts I only get a set of ttf files. What css file do i need to create and refer to it between <stylesheets> tags in the assets.xml file.

Thanks in advance!

Valeri

Hi marval1,
Thanks for your feedback!
In this case fonts.googleapis.com/css?family=Open+Sans:400,700 still link to
fonts.gstatic.com/s/opensans/v13/K88pR3g...pOI_IvcXXDNrsc.woff2
You can see in css file.
So when you download it and upload to your server you need change css path too.
But I think google very trusted and no problem to load font from here!

Thanks

I have no problem with pulling the fonts from google. However some browser give a nasty warning message when they come across the mixed content.

Do you mind showing me how I can change the css file to point them to the fonts that I downloaded from Google.

Thanks in advance

Hi marval1,
Thanks for your feedback!
You can open file font-opensans.css and see link similar:
url( fonts.gstatic.com/s/opensans/v13/K88pR3g...pOI_IvcXXDNrsc.woff2 ) format('woff2')
You can change link to your site!
The same you can see in: {root}/templates/jux_forlio/etc/assets.xml file font-awesome.min.css
Hope this help!

Thanks,

Your suggestion did work. However I can still see the reference to the <link href=' fonts.googleapis.com/css?family=Open+Sans:400,700 ' rel='stylesheet' type='text/css'> in the source. There were two places that had a reference to googleapis fonts, one is referencing to a newly created .css but the other stayed. Do you know where it can possibly be coming from?

Thanks in advance

Hi marval1,
Did you remove old link to google in assets.xml?
If you removed it please pm me your site url and admin account. I'll check it for you!

Hi marval1,
Thanks for your feedback!
I checked your site. Please try remove the link at:
Step 1: go to path {root}/templates/noone_v2/tpls then open file head.php
Step 2: go to line 58 and change path to your css folder!
Hope this help!
Note: you should change path to font in:
{root}/templates/noone_v2/etc/asset.xml

Great! that was the last reference to these fonts!

Thanks

V