My local solar monitor (ESP device accessed on LAN using unsecure http) includes two PVO graph widgets similar to these examples at Widgets and Portlets — PVOutput documentation
However, when I click on one graph it now always asks me to login to PVO. This is quite inconvenient on my phone.
The issue is that the widget code re-writes part of embedded web page,
where the graph widgets goes to http://pvoutput.org/intraday.jsp?sid=
while the outputs widget goes to https://pvoutput.org/list.jsp?sid=
Also some internal jquery js scripting is fetched via http: protocol.
I believe that is wrong; internet communication should be secured where ever possible.