WebView images are not showing with HTTPS

Question

My application opens a web view to show HTML page, which is hosted with HTTPS contains one image(image coming from http). On some devices image is not showing but for all other devices its working fine. I checked with multiple devices like Nexus, Samsung s6/s4, Moto G2 and others. Only on Samsung S4/S6, nexus image is not showing. but for all other devices its working fine. Even i tried with WI-FI, data carrier, and multiple OS versions but no luck.

Please help to solve this.

some observations:-

1) On each device i am getting same warning :- [blocked] The page at 'page url' was loaded over HTTPS, but displayed insecure content from 'image source': this content should also be loaded over HTTPS.

2) same page if i am opening in web browser, working fine on all devices.

My Code

mWebView = (WebView) findViewById(R.id.m_web_view);
    WebSettings webSettings = mWebView.getSettings();
    webSettings.setJavaScriptEnabled(true);
    mainUrl = bean.getUrl();
    mWebView.loadUrl("javascript:window.location.reload( true )");
    mWebView.loadUrl(mainUrl);
    mWebView.setWebViewClient(new myWebClient());



    private class myWebClient extends WebViewClient {

    @Override
    public void onPageStarted(WebView view, String url, Bitmap favicon) {
    //some code
    }

    @Override
    public boolean shouldOverrideUrlLoading(WebView view, String url) {
        //some code
    }

    @Override
    public void onReceivedSslError(WebView view, SslErrorHandler handler,
            SslError error) {
        handler.proceed();
    }


}

may be it is a problem of self signed certificate, can you check this http://stackoverflow.com/questions/5977977/does-the-web-view-on-android-support-ssl — Dickens A S, Jul 20 '15 at 05:25

score 62 · Accepted Answer · answered Jul 20 '15 at 10:09

62

Mixed content using HTTP and HTTPS on WebViews are disabled by default starting Lollipop. Is possible that is not working on devices with Lollipop? If this is the case, you can change the default WebView setting on Lollipop using:

webSettings.setMixedContentMode(WebSettings.MIXED_CONTENT_ALWAYS_ALLOW);

Documentation here: http://developer.android.com/reference/android/webkit/WebSettings.html#setMixedContentMode(int)

answered Jul 20 '15 at 10:09

Pollizzio

1,023
8
11

Thanks you are the savior :) – Ajit Sharma Jul 20 '15 at 11:24
2

@AjitSharma For anyone coming here from Google, a better option might be to use `WebSettings .MIXED_CONTENT_COMPATIBILITY_MODE` since that will allow images, videos, and other content that is less likely to be used to attack a user. – hvaughan3 Jul 28 '16 at 15:34
Works Like Charm. Saved my day. Thank you @Pollizzio – Parth Anjaria Aug 10 '16 at 07:27
Not all heroes wear capes, saved me a ton of time! – Shooky Aug 06 '18 at 13:48
If I am calling the `webview` from a class via a JAR file and don't have access to the `webview` object, how can I enforce this setting? – S_S Oct 16 '18 at 10:55

score 3 · Answer 2 · answered Jul 20 '15 at 05:31

3

Use the follwoing code. You can open https using the following code, extend the onReveivedSslError method of WebViewClient and proceed if any error occurred Here is an example

    WebView webview= (WebView) findViewById(R.id.my_webview);
    webview.setWebViewClient(new WebViewClient() {
     public void onReceivedSslError (WebView view, SslErrorHandler handler, SslError error) {
     handler.proceed() ;
     }

}

answered Jul 20 '15 at 05:31

Gopal Singh Sirvi

4,539
5
33
55

Not working. I am adding my code in comment. Please look and let me know if anything i missed. – Ajit Sharma Jul 20 '15 at 09:29

score 1 · Answer 3 · answered Jul 20 '15 at 07:37

1

Actually it's a SSL property of webview so to handle this you will have to use following code.

engine = (WebView) findViewById(R.id.my_webview);
engine.setWebViewClient(new WebViewClient() {
 public void onReceivedSslError (WebView view, SslErrorHandler handler, SslError error) {
 handler.proceed() ;
 }
}

And in handler you can run webview image url easily.

answered Jul 20 '15 at 07:37

Vishal Jain

175
2
18

2

Do not implement this onReceivedSslError Google play will reject your app – Chinthaka Devinda May 03 '18 at 08:51

WebView images are not showing with HTTPS

3 Answers3

Linked