Security error


We're migrating from VB4 to XF2 and we have created a test environment for XF2 at this URL

We have HTTPS enabled and are using Enhanced Search. I rebuild the search index and tried testing the search, but got this error.

Security error occurred. Please press back, refresh the page, and try again.
Failed to load No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin '' is therefore not allowed access.
The origin is, non HTTPS. Why is it doing that? Shouldn't the origin be ""

I'm not sure how to fix this, so any insight would be appreciated.

For all the settings in XF2 admin, I have as the forum URL.


It looks like it's a problem with HTTPS.

For some reason if I click the "Home" link or logo, it goes back to the home page, but the URL is HTTP.

I have https enabled in the config and all the URLs in the admin settings area are using https, so why is that redirecting back to http?