Ticket #1764 (new defect)

Opened 1 year ago

Last modified 5 months ago

Fixing the IE 8 warning – ‘Do you want to view only the webpage content that was delivered securely?’

Reported by: lyric Assigned to: demian
Priority: normal Milestone:
Component: SGL Severity: open
Keywords: IE8 ssl Error Cc:

Description

Internet Explorer 8 gives the following incorrect warning: ‘Do you want to view only the webpage content that was delivered securely?’

// Causes mixed content message in IE on a secure page
document.write("<script id="__ie_onload" src="javascript:void(0)"></script>");
document.getElementById("__ie_onload").onreadystatechange = function()
{
     if (this.readyState == "complete") domReady();
};

It’s a trick used to emulate a DOMContentLoaded event in IE. A security warning occurs because of the use the “javascript:” protocol even though no download occurs.

The fix is to use //: in the src attribute in the same way as popular javascript libraries such as jQuery and prototype. This does cause a harmless ERROR_INVALID_URL entry in HttpWatch?, but it avoids the mixed content message:

// Does not cause a mixed content message in IE on a secure page
document.write("<script id="__ie_onload" src="//:"></script>");
document.getElementById("__ie_onload").onreadystatechange = function()
{
     if (this.readyState == "complete") domReady();
};

(Citation from: http://blog.httpwatch.com/2009/09/17/even-more-problems-with-the-ie-8-mixed-content-warning/ )

Attachments

patch.diff (0.5 kB) - added by lyric on 04/13/12 11:30:55.
patch.2.diff (0.5 kB) - added by lyric on 03/15/13 19:09:25.
fixes the hack

Change History

04/13/12 11:30:55 changed by lyric

  • attachment patch.diff added.

01/03/13 10:43:11 changed by demian

  • status changed from new to closed.
  • resolution set to fixed.

(In [4431]) addressing msie8 ssl error message, fixes #1764

01/03/13 10:44:00 changed by demian

Thanks Lyric, goes out in next release

03/15/13 19:09:25 changed by lyric

  • attachment patch.2.diff added.

fixes the hack

03/15/13 19:10:30 changed by lyric

  • status changed from closed to reopened.
  • resolution deleted.

03/15/13 19:10:50 changed by lyric

  • owner changed from somebody to demian.
  • status changed from reopened to new.