#191 ✓invalid
Richard Cook

SSL Problems

Reported by Richard Cook | June 26th, 2008 @ 10:58 PM

When I am running a page that includes prototype and is using SSL, I get a "This page contains both secure and nonsecure items. Do you want to display the nonsecure items?" I only get this error in IE (v 7.0.5730.11) and not in FireFox. When I comment out the prototype include, then the question goes away. Any help would be appreciated since we are using it throughout our website.

Comments and changes to this ticket

  • Juriy Zaytsev

    Juriy Zaytsev June 27th, 2008 @ 02:21 AM

    This usually happens when there are both secure and non-secure elements on a page. You could also turn it off in IE settings.

  • John-David Dalton

    John-David Dalton June 27th, 2008 @ 03:31 AM

    I use Prototype.js with SSL and have not had issues with IE.

    Are you using IFRAMES or something?

  • John-David Dalton

    John-David Dalton June 27th, 2008 @ 02:48 PM

    • State changed from “new” to “invalid”

    Try posting this to the User List.

    If they cannot resolve this then please reopen the ticket.

    http://groups-beta.google.com/group/rubyonrails-spinoffs

  • Richard Cook

    Richard Cook June 27th, 2008 @ 06:02 PM

    • no changes were found...
  • Richard Cook

    Richard Cook June 27th, 2008 @ 06:02 PM

    Nope, no Iframes on the page. I will upload a copy of the prototype.js file that we are using.

  • Richard Cook

    Richard Cook June 27th, 2008 @ 06:10 PM

    I have done a view source on the rendered page from both IE and Firefox and copied those pages into source safe and did a dif on the file and except for whitespace, they are exactly the same.

  • John-David Dalton

    John-David Dalton June 27th, 2008 @ 06:22 PM

    • Assigned user cleared.

    Be sure to post to the User List and see if they can help you.

  • Richard Cook

    Richard Cook June 27th, 2008 @ 07:30 PM

    I have submitted to the User List as well

  • John-David Dalton

    John-David Dalton June 30th, 2008 @ 09:14 PM

    Glad the list helped. Prototype 1.6.0.3 (the next release) will use a different method for detecting DOM loaded for IE that should avoid the issue you experienced.

  • Hakan Wergeni

    Hakan Wergeni November 3rd, 2008 @ 05:06 PM

    Sorry for getting this thread alive again, but I don't get how to solve this SSL error, me stupid.

    Please point me in the right direction.

    IE version 7.0.5730.13 https://rogavi.com/ - error http://rogavi.com/ - ok

    regards Hakan Wergeni

  • zsombor

    zsombor May 11th, 2009 @ 01:57 PM

    • Assigned user set to “Sam Stephenson”

    I see the same problems with the latest 1.6.1 rc2 file. This patch had fixed for my rails app:

    --- a/public/javascripts/prototype.js +++ b/public/javascripts/prototype.js @@ -2096,6 +2096,7 @@ Element.Methods = {

       var el = document.createElement('iframe'),
           isBuggy = false;
    
    
    • el.setAttribute('src', '/blank.html'); document.documentElement.appendChild(el); try {
       el.getAttribute('type', 2);
      
      

    Note that all iframe nodes created must have an "src" attribute set. Otherwise IE6 will throw the "page contains both secure and nonsecure items" on all SSL documents. Here I've used a zero size "blank.html" file that we have for this purpuse. I tried using different javascript expressions but none worked.

  • zsombor

    zsombor May 11th, 2009 @ 02:09 PM

    Drat broken formating

    
    --- a/public/javascripts/prototype.js
    +++ b/public/javascripts/prototype.js
    @@ -2096,6 +2096,7 @@ Element.Methods = {
           var el = document.createElement('iframe'),
               isBuggy = false;
    
    +      el.setAttribute('src', '/blank.html');
           document.documentElement.appendChild(el);
           try {
             el.getAttribute('type', 2);
    
  • Tim Fluehr

    Tim Fluehr May 11th, 2009 @ 03:26 PM

    Confirming that this is an issue in IE6 using SSL.

    I was able to change the above patch to use:

    
    el.setAttribute('src', 'javascript:false;');
    

    which seemed to work for me.

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.

New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

The Prototype JavaScript library.

Shared Ticket Bins

Attachments

Pages