cfchart over SSL (https) 'Do you want to display the nonsecure items'?

Posted on 2006-05-25
Last Modified: 2013-12-24
Okay. We all know about the 'Do you want to display the nonsecure items?' deal in IE. (anyone who puts flash on an SSL page at least) And I know how to fix the problem for Flash objects I insert.

What about ColdFusion, though? I am using ColdFusion's cfchart tag to create custom charts for my customer. I am even using custom XML for styling them EXACTLY how I want them (this is very cool). These charts are great, except that now that I have changed my site over to SSL I get the infamous popup: "This page contains both secure and nonsecure items. Do you want to display the nonsecure items?"

Since ColdFusion generates the code and the "codebase" argument responsible for this popup, and since it ALWAYS puts the http:// link in there, is there anything I can do to keep this thing from popping up? My customers really need these charts but don't need the annoyance.

Should I contact Macromedia (Adobe) tech support and file a bug? I think it should be able to detect the URL of the site and automatically adjust to this. I would still like  a short term solution, though.


Question by:mobrien118
    LVL 13

    Accepted Solution

    Check out the hack from MikerRoo on:

    ... or kill the flash, I guess :(

    Author Comment

    Although it took some time to find the solution in that page you linked to I modified that method to test whether or not the page is SSL and the way the find/replace works and used it. It seems to be the only fix for now but I wish Macromedia (Adobe) would just get it together and fix stuff like this. Sorry, Macromedia, I realize it is also a function of Microsoft because obviously a 'codebase' attribute, if it is not activated (i.e. the user is redirected to that page), is not a security threat. (or am I missing something?)

    I will award you the points, USAChrisK1983.



    Featured Post

    Superior storage. Superior surveillance.

    WD Purple drives are built for 24/7, always-on, high-definition security systems. With support for up to 8 hard drives and 32 cameras, WD Purple drives are optimized for surveillance.

    Join & Write a Comment

    In our day to day coding, how many times have we come across a necessity to check whether a URL is a broken link or not? For those of you that answered countless and are using ColdFusion like myself, then this article is for you.  It will show yo…
    Have you ever sent email via ColdFusion and thought of tracking this mail to capture the exact date and time when the message was opened ?  If yes, then this article is for you ! First we need a table user_email with columns user_id , email , sub…
    how to add IIS SMTP to handle application/Scanner relays into office 365.
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now