Allow Chrome to Load Insecure Content – How to Guide

Chrome blocks some insecure high-risk content (javascript) and allows other lower risk content (images)

Visit this strange ie mixed content test page, and look at the javascript console. You can see that images are displayed (with warnings in the console) but insecure scripts are blocked.

This is ok, but not great. A malicious man-in-the-middle could still track a user in this way. I'd still like the option to block all of the insecure content.

Firefox 23+ also has this feature (verified by me on the test page above in Firefox 24) in that it blocks the javascript (which firefox call "active content", but not the images "passive content").

With respect to Gmail specifically, I found this life hacker article on gmail security icons. which explained that I probably downloaded external images into an email... which triggers the warning, and because Gmail is a single page app, and doesn't normally reload, the yellow padlock never goes away. Refresh the page, and it goes green again.

Change your Chrome shortcut to this:

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --allow-running-insecure-content

Another site showed the command parameter inside the quotes; that is wrong. It must be outside the quotes just like above. I am using it now to play Farmville, which was what was giving me a problem in Chrome.