Custom Tumblr theme wont save because of non-https urls?

Question

So yesterday i was happily editing the theme of my tumblr blog and everything was working fine. Go into same blog to day and it brings up thsi when i click save: "Un oh! We could't save your theme. Looks like your custom theme references assets from non-HTTPS Urls. Please try again using only HTTPS Urls." Super confusing because not urls have been add since yesterday and everything was fine then. Same thing is happening with my other blogs with custom themes. I even went through and deleted all the urls on the html page just to see if it would do anything and the same alert came up. What is going on ??

Please help

Cheers

Answer 1

Just had the same problem. Tumblr updated their Encryption policies.

If you're a theme developer and you'd like to ensure your themes support HTTPS, make sure that any externally hosted resources, such as Cascading Style Sheets (CSS) or Javascript files, and even images, are served using HTTPS.

---

As we now know that Tumblr requires that we use HTTPS instead of HTTP, here's how can we solve the error:

1. Make sure that you are in the customize section and access "Edit HTML":

2. In the "Edit HTML", press Ctrl+F (or press the Settings button and then "Find and replace"):

3. Search for "http" and Replace with "https" - apply that to all.

4. As the previous step can cause some links to be "httpss", this needs to be fixed. By accessing the Find and Replace and Search for "httpss" and Replace with "https".

The steps bellow should solve your problem. If they don't, see "Extra considerations" below, more specifically, point 1.

---

Extra considerations

1. I've done all the above, but it didn't solve my problem. What should I do?

When one has android-app://, for example:

<link rel="alternate" href="android-app://com.tumblr/tumblr/x-callback-url/blog?blogName=goncalomperes" />

One will need to add [https], as following:

<link rel="alternate" href="android-app:https://com.tumblr/tumblr/x-callback-url/blog?blogName=goncalomperes" />

As @mchid suggested in the comment, apart from android-app://, we will also need to do the above for: "//, ios-app://, and http-equiv.

2. Accordingly to Tumblr support:

Yet another update: SSL is now being turned on by default for ALL Tumblrs that use our Official theme on the web. Even though we don’t recommend it, you can still turn it off in your blog settings.

So changing the Encryption section to allow SSL should not be the problem.

Answer 2

Ok im a goose. Looks like tumblr has changed their requirements on http. I know it sounds obvious but i couldn't tell why it was happening on every theme apart from their default theme. The reason is you need to go in and change the tumblr links to css and java from http to https "http://static.tumblr.com/xlsgtjb/WEMoeha97/style.css becomes https://static.tumblr.com/xlsgtjb/WEMoeha97/style.css" If you still get the alert after this try searching for other urls and delete or change them to https