title: How do I resolve the mixed content error: The page requested an insecure font 'https:'
body: <p>My page (<a href="https://www.horizonhomes-samui.com/" rel="nofollow noreferrer">page here</a>) is suddenly displaying an unidentified mixed content error in the JavaScript console.  How can I resolve this error?  The error message is:</p>
  
  <pre><code>Mixed Content: The page at 'https://www.horizonhomes-samui.com/' was loaded over HTTPS, but requested an insecure font 'https:'. This request has been blocked; the content must be served over HTTPS.
  </code></pre>
  
  <p>Usually a mixed content error displays the a full URL of the offending insecure call.  But in this case it only displays <code>https:</code>.  The error references line one of my HTML source code, which isn't terribly illuminating.</p>
  
  <p>Here are the additional troubleshooting steps I've taken:</p>
  
  <ul>
  <li><p>As a test, on my private dev site, I added an additional response header to my page to hopefully gain more insight into the mixed content error (per <a href="https://developers.google.com/web/fundamentals/security/prevent-mixed-content/fixing-mixed-content#finding_mixed_content_with_content_security_policy" rel="nofollow noreferrer">these Google instructions</a>), and loaded the page.  This time the JS console contained more information (<a href="https://imgur.com/RjhqWfd" rel="nofollow noreferrer">screenshot</a>).  Some of the new entries pointed to a file scripts.js, specifically, the line <code>var ret = test.offsetTop !== control.offsetTop;</code>  This is part of a function that seems to be related to the <a href="https://modernizr.com/" rel="nofollow noreferrer">Modernizr</a> JavaScript library (<a href="https://imgur.com/bKbke7d" rel="nofollow noreferrer">screenshot</a>).  Other entries pointed more directly to the Modernizr library.</p></li>
  <li><p>I tried to carry out a search and replace of my database, but it wasn't very illuminating.  Specifically, used a plugin to execute a search and replace dry run. in which no changes are made.  It only generates a report of which database tables would be modified, and how many modifications would be done for each table.  I search for 'http:' and it returned ~1,200 hits, in several databse tables.</p></li>
  <li><p>I have the ability to carry out a text search of all my source code.  But what would I search for, <code>https:</code>?  That would return too many hits to review.</p></li>
  <li><p>The website is a WordPress site. As a test, I tried changing my theme from my child theme to my parent theme, and the issue went away.  So I guess that points to one of my child theme files as the culprit.</p></li>
  <li><p>I cannot replicate the issue in Firefox.  I have not been able to carry out an accurate test in IE or Edge because I am currently experiencing a separate, unrelated issue with those browsers.</p></li>
  <li><p>Looking at my source code, I see there are four similar calls to Google fonts, for the fonts: Questrial, Raleway, Montserrat, and Comfortaa. In the 'Network' tab of Chrome dev tools, it indicates that the Montserrat and Questrial fonts were loaded without issue (<a href="https://imgur.com/a/SyCt5Ot" rel="nofollow noreferrer">screenshot</a>). But there were errors loading two additional, unknown fonts. Maybe these two unknowns are the Raleway and Comfortaa fonts.  As an additional test, I was able to omit the call to the 'Raleway' font (<a href="https://imgur.com/hrwVbzE" rel="nofollow noreferrer">screenshot</a>). But the page still displayed two mixed content errors related to fonts. I would have thought that omitting one of those font calls might remove one of the mixed content errors.</p></li>
  </ul>
  
  <p>There have been no mixed content errors for the past ~3 years that I have been admin of this site.  To my knowledge, I've made no recent changes that would have caused this, other than updating a few plugins which I did a couple weeks ago.  I guess as a troubleshooting step I could try to ascertain what plugins I updated and roll them back to their previous versions.</p>