Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 991
  • Last Modified:

Mozilla Firefox Security Warning

I have a secure website developed using ASP.NET that works fine in all browsers I have tested except Mozilla.  The problem is that Mozilla reports that some items on the page are not encrypted and as far as I can tell everything is encrypted and passed from the web server.

If I disbale JavaScript in my Mozilla browser the problem goes away but I need JS for the site to function.  Other users have reported this same issue whereas others do not get this warning...

All the JavaScript code is embedded in the HTML page within a script tag.
0
BorisMatthews
Asked:
BorisMatthews
  • 3
  • 3
1 Solution
 
Chris-ChambersCommented:
Hi,

Make sure ALL content, scripts images etc. are being served from the secure server. You will get this message if, for example, you are referencing an image from a non-secure server:

<img src="http://www.othersite.com" />

Hope this helps,

Chris.
0
 
BorisMatthewsAuthor Commented:
Only two images and both are relative references to th eserver and Mozilla reports both as coming from an HTTPS link.

All scripts are embedded within the HTML page so must be coming via the HTTPS page load?

Thanks
Andy
0
 
BorisMatthewsAuthor Commented:
Sorry, also meant to say that I have now tested thi son another PC that I have and it works fine with no errors so looks like is is somhow a client specific issue.  Both PC's are running the same OS and SP, both have a clean default install of Firefox and all settings as far as I can tell are the same - so a real mystery!
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 
Chris-ChambersCommented:
Do you have a url I can look at?

Chris
0
 
BorisMatthewsAuthor Commented:
0
 
Chris-ChambersCommented:
I'm not getting any error message here on any browser, but there are a lot of (x)html errors. It looks like it has been cut and pasted from Microsoft Word which adds a lot of useless tags.

Try cleaning up the code and see if this helps:

Remove '<?xml namespace="" ns="urn:schemas-microsoft-com:office:office" prefix="o" ?>'

Remove all '<o:p>' and '</o:p>' tags

The document is declared as xhtml, so all tags must be lower case, ie. change all <SPAN> to <span>, all <FONT> to <font> etc.

Chris.
0

Featured Post

Lessons on Wi-Fi & Recommendations on KRACK

Simplicity and security can be a difficult  balance for any business to tackle. Join us on December 6th for a look at your company's biggest security gap. We will also address the most recent attack, "KRACK" and provide recommendations on how to secure your Wi-Fi network today!

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now