1. Home
  2. Products
  3. Social card preview
  4. API
  5. Checks
  6. image.insecure

image.insecure

Image is served over http. Level: Warning.

When it is raised

Raised after the image has loaded, when the image URL begins with http://. The URL is judged as resolved from the tag against the page's final URL, after redirects, and before the API's crawler follows any redirects of the image's own; a relative value on an http page therefore resolves to http:// and raises this check instead of image.relative.

What it does to a shared link

The API treats an http image as a risk because an https page that embeds it makes a mixed-content request. Facebook's published image guidance does not mention http or https.

How to fix it

  1. Serve the image over https.
  2. Change the tag's value to the https URL of the image.
<meta property="og:image" content="https://example.com/card.png">

Related checks

Sources