SSL Insecure content warning on browsers due to Google Fonts call [#1851522]

Some css files in Omega kickstart have below code that cause insecure content warnings when using SSL:

@import url(http://fonts.googleapis.com/css?family=Open+Sans:400,700,300,600,800);
@import url(http://fonts.googleapis.com/css?family=Gentium+Basic:400,700);

Removing "http:" fixed the problem. Files can be found in:

commerce_kickstart-7.x-2.0-rc4\profiles\commerce_kickstart\themes\omega_kickstart\css\

Comments

Comment #1

Cookiz CreditAttribution: Cookiz commented 2 December 2012 at 11:42

Assigned:

Unassigned

» Cookiz

Comment #2

esbon CreditAttribution: esbon commented 8 January 2013 at 00:08

Hi, have you had the same problem as I do. All Omega themes I've tested have the same problem of insecure content warning with SSL even after the kickstart removed the http from @import google fonts.

Does anybody know what causes this and how to fix it?

Comment #3

spazfox

Olympia, WA

CreditAttribution: spazfox commented 12 February 2013 at 19:26

Removing the "http:" seemed to be preventing the font/css from loading at all for me. To fix I added this function to my template.php file (I'm using a custom subtheme based on this one, but this should work for the Omega Kickstart template.php, as well):

function omega_preprocess_html(&$variables) {
  drupal_add_css('//fonts.googleapis.com/css?family=Open+Sans:400,700,300,600,800',array('type' => 'external'));
}

The @import lines from global.css could then be removed.

Comment #4

Cookiz CreditAttribution: Cookiz commented 14 February 2013 at 13:18

Status:

Active

» Fixed

Fixed in the last dev release.
I'll see for the next release of omega_kickstart + commerce_kickstart to ship it with fontyourface module, in order to ease the modification of font.