{"id":92474,"date":"2017-08-11T15:39:52","date_gmt":"2017-08-11T15:39:52","guid":{"rendered":"https:\/\/webkul.com\/blog\/?p=92474"},"modified":"2026-01-22T13:46:32","modified_gmt":"2026-01-22T13:46:32","slug":"serve-odoo-posbox-over-https","status":"publish","type":"post","link":"https:\/\/webkul.com\/blog\/serve-odoo-posbox-over-https\/","title":{"rendered":"FIX: Mixed Content Errors while serving ODOO POSBOX over HTTPS"},"content":{"rendered":"

In this article, we`ll check different approaches to fix\u00a0the mixed content errors we received in ODOO, served over HTTPS, while connecting with POSBOX. But before starting we need to know some basic terms related to it, lets begin:<\/p>\n

What is\u00a0HTTPS ? What are the benefits of using HTTPS over HTTP ?<\/strong><\/p>\n

When we\u00a0visit a web page using HTTP<\/strong> protocol, your connection to the website is not secured. Hackers can easily do eavesdropping here, and can stole your data which webpage and your server communicates.<\/p>\n

That\u2019s why we have HTTPS\u00a0<\/strong>protocol,\u00a0The ‘S’ at the end of\u00a0HTTPS\u00a0stands for ‘Secure<\/strong>‘. It means all communications between your browser and the website are encrypted. This keeps your information safe from hackers. HTTPS\u00a0is extremely important if we are using any payment gateways or other password related things\u00a0in your websites.<\/p>\n

What is “mixed content”?<\/strong><\/p>\n

Mixed content error\u00a0occurs when we try to access a web page which is on HTTPs<\/strong> but the web page\u2019s source code is also pulling some other resources with the insecure HTTP<\/strong> protocol. In this scenario,\u00a0browsers display a warning\/error message saying that the page has both HTTPS and HTTP content, i.e MIXED CONTENT.<\/p>\n

Odoo POSBOX blocked by “Mixed Content” Security Policy<\/strong><\/p>\n

After migrating ODOO from http to https, posbox stopped working we have this mixed content problem which prevents loading http resources from a page served in https. In other words if your point of sale is served over https, browser will block the http connection to the posbox. Error message which we are receiving in browser is something like :<\/p>\n

Mixed Content: The page at ‘https:\/\/192.168.1.78\/pos\/web\/#action=pos.ui<\/span>‘\u00a0<\/span>was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint\u00a0‘http:\/\/192.168.1.93:8069\/hw_proxy\/hello<\/span>‘.<\/span> This request has been blocked;\u00a0the content must be served over HTTPS. send @ web.assets_common.js:954<\/span><\/em><\/span><\/p><\/blockquote>\n

\n

There are several approaches to fix this issue, which i `ll explain in this article:<\/p>\n

Approach 1: Deactivate mixed content security in your browser. [ Works only with Firefox, No workaround found for Chrome\/Safari till date<\/em> ]<\/span><\/strong><\/p>\n

To\u00a0disable mixed content<\/b>\u00a0warnings in\u00a0Firefox\u00a0<\/b>open\u00a0Firefox, enter about:config<\/em> into address bar and hit Enter. Using the search box, search for a setting called\u00a0security.mixed_content.block_active_content<\/em>. Once you have found it,\u00a0set it to false.
\nUnfortunately we can`t disable this security in case of Chrome or Safari, we have to use some other approaches in order to fix this issue.<\/p><\/blockquote>\n

Approach 2: Serve the point of sale over http. [ Have to compromise with\u00a0loading some of ODOO data in\u00a0plain HTTP<\/em> ]<\/span><\/strong><\/p>\n

We can serve our point of sale in plain HTTP, and rest of our ODOO as HTTPS by configuring nginx to only serve the point of sale route\u00a0\/pos\/web<\/code><\/strong>\u00a0in HTTP.<\/p>\n

Check sample nginx configuration file having this setup, LINK<\/a><\/p><\/blockquote>\n

Approach 3: Migrate POSBOX as well, in HTTPS. [ Best Approach Found till date<\/em> ]<\/span><\/strong><\/p>\n

Install & configure nginx in posbox also, and append https:\/\/ with the IP address while configuring in your Point of Sale.<\/p><\/blockquote>\n

I have created a image having nginx properly installed and configured in it, if someone looking for the same, can use it. what you need to do is :<\/p>\n