Hunting Mixed Content: Why I Ditched the Blogger Page List Gadget

The Broken Padlock: Hunting Mixed Content

You’ve enabled HTTPS. You’ve forced the redirect. But when you load the Blogger Foundry, the golden padlock is missing or showing a warning. This is "Mixed Content"—the silent killer of site security and SEO rankings.

The Culprit: The 'Page List' Gadget

In a recent security audit of the Foundry, I found the leak. The default Blogger Page List gadget was hardcoding links using http:// instead of https://. Because this gadget is a "black box," you can't always see the outdated protocol hiding in the code.

Why the Architect Ditched the Default

Standard gadgets are built for convenience, not precision. By moving to a Custom HTML Navigation, we gain three distinct advantages:

• Protocol Control: We ensure every link is secure or "protocol-relative."
• Silo Optimization: We can link directly to high-value Labels rather than static Pages.
• Clean Code: No extra Blogger "bloat" scripts slowing down the DOM.

The Fix: Protocol-Relative Linking

Instead of hardcoding the full URL, the Architect uses relative paths. This ensures that no matter how the user accesses the site, the link stays within the secure environment.

<!-- Secure Relative Path -->
<a href="/search/label/Blogger%20Hacks">Blogger Hacks</a>

Final Inspection

If your padlock is still flickering, use Chrome DevTools (F12) and check the Console tab. It will list every single "Mixed Content" error by name. In the Foundry, we don't guess—we inspect, we identify, and we rebuild.