Mobile app version of vmapp.org
Login or Join
Barnes591

: How can I force Blogger's 'search widget' to use HTTPS? I've just set up CloudFlare for my website, so that I can run HTTPS (yes, I know it's not encrypted end-to-end... this is fine). All

@Barnes591

Posted in: #Blogger #Cloudflare #Https

I've just set up CloudFlare for my website, so that I can run HTTPS (yes, I know it's not encrypted end-to-end... this is fine). All the images, script resources, etc. are now linked using protocol-agnostic URLs, but I'm still not getting the green 'Secure' indicator in Chrome's address bar.

This is because Blogger is injecting their nav/header bar into my pages, and that bar includes a search form with an action attribute of "http://www.example.com/" (no HTTPS)

I can't use CloudFlare to rewrite it because it's not being served from my own host. I've tried hiding it using CSS but this doesn't remove the warning. There's no explicit option I can find anywhere in the Blogger admin to configure or remove this header/search bar.

It's a fragment of HTML inside an IFRAME; before I start hacking around with all sorts of complicated JavaScript to try and intercept the iframe and stop it loading, is there a cleaner way of doing this? I'm happy with the search form targetting , I'm happy to remove the search form - or even the entire nav bar - from the page; I just want to get rid of the mixed-mode security messages and get my green padlock... any ideas?

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Barnes591

1 Comments

Sorted by latest first Latest Oldest Best

 

@Karen161

...and, of course, within 2 minutes of posting the question, I've found it.

Log into Blogger, Layout, Navbar, Edit, and there's an option to switch the navbar off.

D'oh.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme