Has anyone used the Channel Videos add-on with https? I have tried rewriting all of the URLs in the add-on with https and also tried rewriting the URLs to just //, without a protocol. Both of those methods still produce insecure content on the site. I would appreciate any feedback the community has to offer. I love this add-on, and I really want to use it on this site.

  • Not sure if there is a better way so I leave this as a comment. In the past I have hacked the core code to do this, not sure if there is a native way now. – Justin Kimbrell Apr 28 '13 at 18:05
  • How are you embedding the videos? Is it an iframe that is output on the page? I've not used Channel Videos before but YouTube supports HTTPS so can't you just change that to being HTTPS? – Ian Apr 28 '13 at 19:18
  • I am embedding using https, and I am now using YouTube's url for the thumbnails instead Channel Video's img_url_hd tag. This has helped with keeping the green bar when the page loads, but now when I play the video, the green bar disappears. – Kelly Cook Apr 28 '13 at 19:33
  • Are you testing with Google Chrome? I know Chrome can be particularly fussy about that sort of thing but I'd be curious to see if it's the same across other browsers. Is it an actual warning or just a disappearance of the green bar? – Ian Apr 28 '13 at 19:50
  • Any luck with this? – Ian Apr 30 '13 at 7:44

How about wrapping your Channel Video tags with Find and Replace to swap out the protocol:

{exp:replace_plus find='http:' replace='https:'}

        <!-- Template Code -->


As I've not used Channel Videos before and can't see what is actually being output in the template files you may need to tweak it a bit.


Taking YouTube as an example, how about adding this to your .htaccess file:

RewriteEngine on
RewriteBase /
RewriteRule ^youtube/(.*)$ http://www.youtube.com/$1 [L]

And then prefixing the video link with your domain over HTTPS:

<embed src="https://www.yourdomain.com/youtube/v/embed_code" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="560" height="340"></embed>

The key is adding https://www.yourdomain.com/youtube/ to the source URI. Apache will then see this and rewrite them to the regular YouTube URI which may result in removing the security warnings.

Again, having not used Channel Videos specifically I'm not sure how you add the source URI but if you have control of this then give that a go.


As it turns out, Channel Videos has https built in.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.