[Issue]: 10.7.7 grabs covers from tmbd over http, not https #3407

New Issue

OVERLORD · 2026-02-06T23:14:40+03:00

OVERLORD commented

2026-02-06 23:14:40 +03:00

Originally created by @lgrn on GitHub (Nov 29, 2021).

Please describe your bug

When clicking "Identify" on an object and putting in some search terms to grab covers etc. the search results (class="cardImageContainer coveredImage") are a mix of HTTP and HTTPS URLs for the images, seemingly dependent on the source. This causes all images (in my case) served over HTTP not to show, as the connection to the Jellyfin instance is over HTTPS and presumably mixed content isn't allowed.

By right clicking the empty space where the poster should be, choosing "Inspect" and changing the URL to one using HTTPS, the poster shows up. Here's an example of an "incorrect" one:

<div class="cardImageContainer coveredImage"
style="background-image:url('http://image.tmdb.org/t/p/original/foo.jpg');">
</div>

Changing to https in the background-image:url makes it show up fine.

This only seems to affect images from TMDB, images from "The Open Movie Database" seem to be HTTPS by default and work fine.

Is there a server-side setting here that I'm missing causing this, or could this be improved so that all covers (where it works) are grabbed over HTTPS?

Jellyfin Version

10.7.7

if other:

No response

Environment

No response

Jellyfin logs

No response

FFmpeg logs

No response

Please attach any browser or client logs here

No response

Please attach any screenshots here

No response

Code of Conduct

I agree to follow this project's Code of Conduct

Originally created by @lgrn on GitHub (Nov 29, 2021). ### Please describe your bug When clicking "Identify" on an object and putting in some search terms to grab covers etc. the search results (`class="cardImageContainer coveredImage"`) are a mix of HTTP and HTTPS URLs for the images, seemingly dependent on the source. This causes all images (in my case) served over HTTP not to show, as the connection to the Jellyfin instance is over HTTPS and presumably mixed content isn't allowed. By right clicking the empty space where the poster should be, choosing "Inspect" and changing the URL to one using HTTPS, the poster shows up. Here's an example of an "incorrect" one: ``` <div class="cardImageContainer coveredImage" style="background-image:url('http://image.tmdb.org/t/p/original/foo.jpg');"> </div> ``` Changing to https in the `background-image:url` makes it show up fine. This only seems to affect images from TMDB, images from "The Open Movie Database" seem to be HTTPS by default and work fine. Is there a server-side setting here that I'm missing causing this, or could this be improved so that all covers (where it works) are grabbed over HTTPS? ### Jellyfin Version 10.7.7 ### if other: _No response_ ### Environment _No response_ ### Jellyfin logs _No response_ ### FFmpeg logs _No response_ ### Please attach any browser or client logs here _No response_ ### Please attach any screenshots here _No response_ ### Code of Conduct - [X] I agree to follow this project's Code of Conduct

OVERLORD added the bug label 2026-02-06 23:14:40 +03:00

OVERLORD closed this issue

2026-02-06 23:14:42 +03:00

OVERLORD referenced this issue

2026-02-07 06:03:19 +03:00

[PR #3407] [MERGED] .gitignore: ignore jellyfin-web symlink & .vscode: dotnet telemetry optout #9503

Sign in to join this conversation.

Branches Tags

master

release-10.11.z

renovate/skiasharp-monorepo

JPVenson-patch-1

renovate/morestachio-5.x

release-10.9.z

openapi-cache

release-10.10.z

explicit-load

explicit-load-v2

feature/entity-framework

only-count-folder-item

fix/ci-workflow-refactor

release-10.8.z

release-10.7.z

EraYaN-add-management-interface

release-10.6.z

release-10.5.z

release-10.4.z

release-10.3.z

release-10.2.z

release-10.1.0

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/jellyfin#3407