{"action":"opened","issue":{"url":"https://api.github.com/repos/Automattic/jetpack/issues/3474","repository_url":"https://api.github.com/repos/Automattic/jetpack","labels_url":"https://api.github.com/repos/Automattic/jetpack/issues/3474/labels{/name}","comments_url":"https://api.github.com/repos/Automattic/jetpack/issues/3474/comments","events_url":"https://api.github.com/repos/Automattic/jetpack/issues/3474/events","html_url":"https://github.com/Automattic/jetpack/issues/3474","id":137399433,"number":3474,"title":"Comments: Custom avatar on non ssl site shows mixed content error","user":{"login":"sandymcfadden","id":1326294,"avatar_url":"https://avatars.githubusercontent.com/u/1326294?v=3","gravatar_id":"","url":"https://api.github.com/users/sandymcfadden","html_url":"https://github.com/sandymcfadden","followers_url":"https://api.github.com/users/sandymcfadden/followers","following_url":"https://api.github.com/users/sandymcfadden/following{/other_user}","gists_url":"https://api.github.com/users/sandymcfadden/gists{/gist_id}","starred_url":"https://api.github.com/users/sandymcfadden/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sandymcfadden/subscriptions","organizations_url":"https://api.github.com/users/sandymcfadden/orgs","repos_url":"https://api.github.com/users/sandymcfadden/repos","events_url":"https://api.github.com/users/sandymcfadden/events{/privacy}","received_events_url":"https://api.github.com/users/sandymcfadden/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-02-29T22:29:33Z","updated_at":"2016-02-29T22:29:33Z","closed_at":null,"body":"#### What I expected\r\nI expected that a custom avatar image being loaded over http instead of https would be copied to then served from an https wp.com address, probably via Photon\r\n\r\n#### What happened instead\r\nWhen you visit a page with comments enabled and it tries to show the default avatar you get Mixed Content errors. An example would be:\r\n\r\n> Mixed Content: The page at 'https://jetpack.wordpress.com/jetpack-comment/?blogid=78781809&postid=1748&…94c2b12#parent=http%3A%2F%2Fwp.sandym.ca%2F2016%2F02%2Fjp-comments-test%2F' was loaded over HTTPS, but requested an insecure image 'http://wp.sandym.ca/wp-content/plugins/sandys-plugin//new-avatar.png'. This content should also be served over HTTPS.\r\n\r\n#### Steps to reproduce the issue\r\n- Add code similar to this to add a custom avatar\r\n`if (!function_exists('custom_avatar')) {\r\n  function custom_avatar($avatar_defaults){\r\n    $new_default_icon = plugin_dir_url( __FILE__ ) . 'new-avatar.png';\r\n    $avatar_defaults[$new_default_icon] = 'custom avatar';\r\n    return $avatar_defaults;\r\n  }\r\n  add_filter('avatar_defaults','custom_avatar');\r\n}\r\n`\r\n- In WP Admin go to Settings > Discussion and set the default avatar to be the custom one added.\r\n- Visit a page using the Jetpack Comments module and view the console for error. \r\n\r\nSeems this is being done around here:\r\nhigherlander-comments.php lines 420ff\r\n"}}