Starting in Firefox 23, if a secure page includes certain types of insecure content, Firefox blocks the insecure content and a shield icon will appear in the address bar as you have already seen. See this article for more information about the new mixed content blocker: Mixed content blocking in Firefox

To temporarily allow the mixed content to be displayed:

• Click the shield icon in the address bar and choose Disable Protection on This Page from the dropdown menu. (hasnt worked for you)

SEE BELOW

To allow insecure content to be displayed in all secure pages, enter about:config in the address bar and double-click on this preference, to toggle it from true to false:

security.mixed_content.block_active_content

You can also use this add-on instead, to toggle the preference:

• Toggle Mixed active content add-on

You may want to do this only for the current session, then reset the preference back to "true" and check back with the site to see whether it's been fixed, since this is a global setting that exposes you on all sites, not just the one you care about.

Let us know if this helps!

Thanks for the suggestion. Although "Disable protection on this page" didn't work, changing the setting by about:config did. I didn't get the warning anymore that the content was blocked. To my disappointment however, the script in GMapToGPX still didn't get executed. It did half a year ago or so. Since it doesn't work with Chrome either, the workaround is to use IE, which is clumsier.

Of course I changed the settings back to the original.

As a temporary workaround you can edit the bookmarklet to load the script from a secure server. I say temporary because I didn't ask the author for permission before doing this and I may have to stop hosting it at any time.

Right-click the bookmarklet and choose Properties

In the Location line, find the following

script.src='http://www.elsewhere.org/GMapToGPX/gmaptogpx.js';

and replace it with

script.src='https://jeffersonscher.com/temp/gmaptogpx.js';

Thanks, i tried it but the script did not get executed. Of course, there was no insecure content warning.

In case my site doesn't appear on the NoScript pop-up in that context, you could allow it from http://jeffersonscher.com/.

If that doesn't fix it, here's the whole code I tested:

javascript:(function(){var%20script=document.createElement('script');script.src='https://jeffersonscher.com/temp/gmaptogpx.js';document.getElementsByTagName('head')[0].appendChild(script);})()