vastlint

SIMID-url-not-https

SIMID creative URL must be HTTPS

ErrorSecuritySIMID 1.2 §3.1, IAB VAST 4.0 §2.3 (security)

SIMID creatives are loaded into a sandboxed cross-origin iframe by the video player. An HTTP URL will be blocked by mixed-content policies in all modern browsers and CTV web views. Most native CTV players also enforce HTTPS for all external resources. An HTTP SIMID URL will result in a blank interactive layer with no error surfaced to the player.

SIMID creatives are loaded into a sandboxed cross-origin iframe by the video player. An HTTP URL will be blocked by mixed-content policies in all modern browsers and CTV web views. Most native CTV players also enforce HTTPS for all external resources. An HTTP SIMID URL will result in a blank interactive layer with no error surfaced to the player.

How to fix

Change the SIMID creative URL to HTTPS. Ensure your ad server and CDN serve the creative over TLS.

Invalid

<InteractiveCreativeFile type="text/html" apiFramework="SIMID">
  <![CDATA[http://example.com/creative.html]]>
</InteractiveCreativeFile>

Valid

<InteractiveCreativeFile type="text/html" apiFramework="SIMID">
  <![CDATA[https://example.com/creative.html]]>
</InteractiveCreativeFile>
Check your VAST tag for SIMID-url-not-https and other issues instantly.Validate a tag →