Is there an easy way (preferably in Chrome) to see which elements on an SSL-enabled page are insecure?

Question

I have a secure page, and Chrome shows me a red padlock instead of a green one, saying that the page has insecure elements.

I read the source code, went through every tab and every element in WebKit Inspector - and I can not find any links to http:// .

Are there any WebKit Inspector tools / Chrome Extensions / easy ways to find out which elements are unsafe? Or do you have any recommendations as to which items can cause problems?

I found this extension https://chrome.google.com/webstore/detail/hfoeodccbohfpgkldfcdknmlbbgmdcle that draws a green or red square around safe / insecure elements, but it is pretty poorly executed and makes it impossible to see which is unsafe, as I cannot find such elements.

Thanks!

Update: strange, when I load the same page into an incognito window, I start getting a green lock. I went back to the original window and tried to disable all the Chrome extensions and then restart, but that didn't make any difference. I think this might be a bit due to hiccups of Chrome ...

Answer 1

As soon as you visit one insecure page in a Chrome session, any subsequent pages that you visit in the same domain will also be marked as insecure. Your problem is most likely from an earlier pageview in the same domain.

Answer 2

Developer Tools (F12) will list all the resources the current page is using.

Take a look at the console or resource tab.

This is probably a link to a third-party JavaScript library or image.

Answer 3

You can try Fiddler .

Fiddler is a web debugging proxy that logs all HTTP (S) traffic between your computer and the Internet. Fiddler allows you to check traffic, set breakpoints, and tinker with incoming or outgoing data. Fiddler includes a powerful event-driven scripting subsystem and can be extended using any .NET language.

Fiddler is free and can debug traffic from virtually any application that supports a proxy server, including Internet Explorer, Google Chrome, Apple Safari, Mozilla Firefox, Opera and thousands of others. You can also debug traffic from popular devices such as Windows Phone, iPod / iPad and others.