Solved

SSL fails in iframes

Posted on 2003-11-10
3
312 Views
Last Modified: 2010-04-09
i have a site secured with SSL. EVerything works fine and i also see the lock icon on the bottom status bar. i am using ie6. now in my secure asp page i inserted a blank iframe. after i did this i get a alert box that says "this page contains both secure and non-secure items. do you want to display both?" when i click 'yes', the page displays and i am able to continue. the site still works properly, but the lock icon on the bottom disappers.

what is happening and how do i cure this. my customer will not accept a page without the lock icon on the bottom even though the site is secure and working properly.

is this a specific issue with iframes ?
0
Comment
Question by:RTKVSNL
  • 2
3 Comments
 

Author Comment

by:RTKVSNL
ID: 9720236
i have posted the code that caused this problem to begin

<IFRAME SRC="" id="fraHeader"  Name="fraHeader" scrolling="no" marginwidth="0" marginheight="0" AllowTransparency="false" frameborder="no"  noresize style="Z-INDEX: 3; LEFT: 0px; WIDTH: 780px; POSITION: absolute; TOP: 0px; HEIGHT: 68px;border-style:none;border-color:red"></IFRAME>
0
 

Author Comment

by:RTKVSNL
ID: 9720451
i have noted one more thing. in the SRC tag above, if i enter some page address then i dont get the security alert, butin my application, i am setting the SRC later through javascript. that is why i have left the SRC blank. could this be a problem?

i also deleted the javascript code, so i was just left with a blank iframe. even this caused the security alert to pop up.

i guess i am in quite a soup !
0
 
LVL 31

Accepted Solution

by:
seanpowell earned 125 total points
ID: 9721017
Hi RTKVSNL,

The problem is caused by your iframe not have a SRC - as you've noted - when the page loads. You need to set the source to reference some dummy page or relative URL in your site, and then replace the URL with your script after load - or however you've set that up.

Thanks,
GM
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
gif banner animation loads randomly in mobile 3 82
addressing a specific html page 9 43
Sums of coloumns in html/java 15 66
Popup to change image and store url in database 2 30
Someone recently asked me about how to display a progress indicator on a page while an iframe is loading. And I remember when I first came across this myself. It was a bit tricky to get my head around, but really, it's very simple. The most impor…
This article demonstrates how to create a simple responsive confirmation dialog with Ok and Cancel buttons using HTML, CSS, jQuery and Promises
The viewer will the learn the benefit of plain text editors and code an HTML5 based template for use in further tutorials.
HTML5 has deprecated a few of the older ways of showing media as well as offering up a new way to create games and animations. Audio, video, and canvas are just a few of the adjustments made between XHTML and HTML5. As we learned in our last micr…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now