IE Security Warning for Mixed content

Internet Explorer gives a Security warning when a page with mixed content is loaded. This happens when a Secure page (HTTPS) contains resources(images/ javascript/ css/ iframes) that are not secure... meaning if the URL for a resource in a page is HTTP then IE gives the below warning.


"This page contains both secure and nonsecure items. Do you want to display the non-secure items?"


This warning message is very annoying if it appears for every page. The solution for this is to check the pages for non-secure urls and convert them to secure. The best is to always use relative URLs where possible.

What we also observed is that 'about:blank' url loaded in an IFrame of a secured page also gives the same warning. Solution for this is to create a blank.html in the server with a blank page and load this as the default url in the iframe.

No comments: