GTMetrix pulling me up on google font

[demonboy]

Hi,

If you look at the GTMetrix waterfall for one of my pages (all of my site), https://gtmetrix.com/reports/followtheboat.com/srrotMNC

you can see that the Montserrat font is being blocked. I have called this up in my CSS thus:

/* @import url(https://fonts.googleapis.com/css?family=Montserrat:400,700);
   @import url(https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,400);*/

@font-face {
  font-family: 'Source Sans Pro';
  src: url('https://followtheboat.com/wp-content/themes/x-child/fonts/SourceSansPro-Regular.eot'); 
  src: url('https://followtheboat.com/wp-content/themes/x-child/fonts/SourceSansPro-Regular.eot?#iefix') format('embedded-opentype'), 
       url('https://followtheboat.com/wp-content/themes/x-child/fonts/SourceSansPro-Regular.woff2') format('woff2'), 
       url('https://followtheboat.com/wp-content/themes/x-child/fonts/SourceSansPro-Regular.woff') format('woff'), 
       url('https://followtheboat.com/wp-content/themes/x-child/fonts/SourceSansPro-Regular.ttf')  format('truetype'), 
       url('https://followtheboat.com/wp-content/themes/x-child/fonts/SourceSansPro-Regular.svg#svgFontName') format('svg'); 
}

@font-face {
  font-family: 'Montserrat';
  src: url('https://followtheboat.com/wp-content/themes/x-child/fonts/Montserrat-Regular.eot'); 
  src: url('https://followtheboat.com/wp-content/themes/x-child/fonts/Montserrat-Regular.eot?#iefix') format('embedded-opentype'), 
       url('https://followtheboat.com/wp-content/themes/x-child/fonts/Montserrat-Regular.woff2') format('woff2'), 
       url('https://followtheboat.com/wp-content/themes/x-child/fonts/Montserrat-Regular.woff') format('woff'), 
       url('https://followtheboat.com/wp-content/themes/x-child/fonts/Montserrat-Regular.ttf')  format('truetype'), 
       url('https://followtheboat.com/wp-content/themes/x-child/fonts/Montserrat-Regular.svg#svgFontName') format('svg'); 
}

This may refer to another thread I started about caching within X. Despite updating my CSS to reflect the https address of google fonts (I had one of my font addresses set to just http), and despite purging all cache (even turned off cache on my CDN), Inspector is still pulling me up for an http address on google fonts, presumably in my CSS:

I don’t understand why Source Sans Pro is ok but not Montserrat. Or, rather, I understand my I’m being flagged, what I don’t understand is why the CSS is not being updated.

Any clues?

[friech]

Hi @demonboy,

Thank you for writing in, if you have not defined this manually somewhere: http://fonts.googleapis.com/css?family=Montserrat:400,700

Then maybe you might have a 3rd party plugin that is requesting that nonsecure Montserrat, please do testing for a plugin conflict. You can do this by deactivating all third party plugins, and seeing if the problem remains. If it’s fixed, you’ll know a plugin caused the problem, and you can narrow down which one by reactivating them one at a time.

Let us know how it goes,
Cheers!

[demonboy]

Sorry - posted reply in wrong thread

[ruenel]

Hello @demonboy,

Please check your site again.
I have fix the mixed content issue and the error should be gone.

Regards.

[demonboy]

Hi @RueNel - I’m still seeing that font in the waterfall results. However this could be a cache thing…

[rad]

Hi @demonboy,

It’s due to this code, which doesn’t seem to be coming from CSS nor theme

And it should be https too, it’s blocked since it loads through HTTP protocol. And yes, if it’s already removed or corrected but still there, then it could be due to cache.

Thanks!

[demonboy]

Sorted. I ended up downloading my entire child theme folder and did a search for http. There were a few links that needed updating but this one appeared in the _header file under ‘renew’. Not sure it’s needed tbh but at least the error has gone away (which also causing some browsers to pick up on a security error).

[ruenel]

Hey @demonboy,

It’s good to know that you have resolved the issue.

Thanks for letting us know.