HTTPS: Internet Explorer nonsecure popup

Feb18
  • Share/Bookmark

Difficulty: ★☆☆☆☆

“Do you want to display nonsecure items?”. You’ve probably seen this popup once before. – You’ll receive this warning message when you are on a HTTPS (signed SSL certificate) website, and you are loading nonsecure items such as iframes or images with an HTTP url instead of HTTPS.

iesecure

Now talking about bug fixing, such a popup can really scare your visitors, for example seeing this warning after filling in personal or bank details.
In worse case it can prevent visitors from making a booking, and that can lost you sales.
To see where this warning is comming from, you can always see before clicking on the “YES” (I want to display) button of the popup, in the statusbar (bottom left of your browser), which item it is loading. (that item requires the confirmation).

Sometimes this is not the case. For example when you are dynamicly loading a page in an iframe:

<iframe name="myIframe" id="myIframe" scrolling="no"></IFRAME>

In this case, the security popup warning won’t be shown in Firefox but Internet Explorer will bug.
There is no src parameter, (or there is an empty src parameter: src=”").

The solution is easy. Let the browser first load an empty page, and then dynamicly reload it with a different page.

 <iframe name="myIframe" id="myIframe" scrolling="no" src="blank.html"></IFRAME>

One Response to “HTTPS: Internet Explorer nonsecure popup”

I found that I got this error without iframes and no-one else seemed to mention what I was hitting: setting CSS background image src from javascript – see http://www.weeklywhinge.com/?p=82 for more info

Geoff Winkless on May 14th, 2009 at 12:57 PM

Leave a comment