Custom Tumblr theme wont save because of non-https urls?

http https tumblr
Layton Otene picture Layton Otene · Jan 8, 2019 · Viewed 90.4k times · Source

So yesterday i was happily editing the theme of my tumblr blog and everything was working fine. Go into same blog to day and it brings up thsi when i click save: "Un oh! We could't save your theme. Looks like your custom theme references assets from non-HTTPS Urls. Please try again using only HTTPS Urls." Super confusing because not urls have been add since yesterday and everything was fine then. Same thing is happening with my other blogs with custom themes. I even went through and deleted all the urls on the html page just to see if it would do anything and the same alert came up. What is going on ??

Please help

Cheers

Answer

Gonçalo Peres 龚燿禄 picture Gonçalo Peres 龚燿禄 · Jan 9, 2020

Just had the same problem. Tumblr updated their Encryption policies.

If you're a theme developer and you'd like to ensure your themes support HTTPS, make sure that any externally hosted resources, such as Cascading Style Sheets (CSS) or Javascript files, and even images, are served using HTTPS.

As we now know that Tumblr requires that we use HTTPS instead of HTTP, here's how can we solve the error:

  1. Make sure that you are in the customize section and access "Edit HTML":

Tumblr - Customize Section

Tumblr - Edit HTML

  1. In the "Edit HTML", press Ctrl+F (or press the Settings button and then "Find and replace"):

Tumblr - Settings - Find and Replace

  1. Search for "http" and Replace with "https" - apply that to all.

Tumblr - Finding and Replacing

  1. As the previous step can cause some links to be "httpss", this needs to be fixed. By accessing the Find and Replace and Search for "httpss" and Replace with "https".

The steps bellow should solve your problem.

Extra considerations

  1. However, if they don't, there is some additional considerations to make:

When one has, for example:

<link rel="alternate" href="android-app://com.tumblr/tumblr/x-callback-url/blog?blogName=goncalomperes" />

We will need to change it to [add the https]:

<link rel="alternate" href="android-app:https://com.tumblr/tumblr/x-callback-url/blog?blogName=goncalomperes" />
  1. Accordingly to Tumblr support:

Yet another update: SSL is now being turned on by default for ALL Tumblrs that use our Official theme on the web. Even though we don’t recommend it, you can still turn it off in your blog settings.

So changing the Encryption section to allow SSL should not be the problem.

Related questions

Enabling HTTPS support on Tumblr blogs

I am trying to work out if there is a way to link to a Tumblr blog over HTTPS/SSL. When I link to my blog with HTTPS I can't access it, but it works under HTTP. I came across …

Read More
How do we control web page caching, across all browsers?

Our investigations have shown us that not all browsers respect the HTTP cache directives in a uniform manner. For security reasons we do not want certain pages in our application to be cached, ever, by the web browser. This must …

Read More
Android 8: Cleartext HTTP traffic not permitted

I had reports from users with Android 8 that my app (that uses back-end feed) does not show content. After investigation I found following Exception happening on Android 8: 08-29 12:03:11.246 11285-11285/ E/: [12:03:11.245, main]: Exception: IOException java.io.IOException: Cleartext HTTP traffic to * …

Read More