Mixing Secured (HTTPS) And Non-secured (HTTP) Content In The Samepage
Apr 10, 2006
Is it possible to have secured (SSL/HTTPS) and non-secured (HTTP)
content in the same page without breaking the security? I am developing
a secured reservation system in which the user can access Google Maps
(not secured). The map is embedded in the page and does not open in a
separate window.
What solution do you recommend? Use iframes? If so, how?
If users click say a home page link on one of my https user login pages they are brought to a https version of my home page. Can I prevent certain pages from being accessed by https. I was looking at [url] but don't know how to implement it in this case.
Is there javascript that detects https and diverts to a http page on refresh or something. ( a bit like the javascript detection script HTTP-EQUIV="refresh" content="0;URL=page.php?page=javascript">)
I have too many links on https pages to create a long url for them all.
- a popup is opened in http and the form is submitted to https
- the https windows tries to do various stuff to opener....:
Error: Permission denied for https get property Window.document
Any solution for this? Same domain... makes no sense to me such security...
In our application there is also a similar known error, but we can live with that: when a page is accessed with ssl/https jquery thickbox ajax is not working.
I am writing JavaScript code that runs inside HTTP page, I need to make XMLHttpRequest to a REST web service. The service is running on the same site but it only accepts HTTPS. I tried to prefix the URL with https:// and Firefox rejected it as cross-site scripting attempt. It's not really cross site as I am calling the same site.
I don't have an option to redirect the entire page to https.
I have a frame in which there are 2 IFrames., both being loaded from the same domain. One IFrame is loaded from http://test1.xyz.com and the other IFrame is loaded from https://test1.xyz.com/test
I am getting an error while accessing data in the HTTP IFRAME from the HTTPS IFRAME.
Is it possible at all to access the data in the other IFrame, when the protocol is different?
I have a real problem with an e-commerce site which has worked for years without a hitch but with the uptake of IE8 (it seems) this problem is getting more and more frequent Problem: customer continues through checkout on main site (http:[url]....).
When they have to enter their credit card details, they click on a link to open a window (https:[url]....). The details are verified and if valid, the customer is returned to the confirmation page in the parent screen (http:[url]....) and the payment window is closed . Pop-up blockers are causing problems here but even when pop-up blockers are disabled, the confirmation page loads in a new window.I'm using :
I have a real problem with an e-commerce site which has worked for years without a hitch but with the uptake of IE8 (it seems) this problem is getting more and more frequent. Problem: customer continues through checkout on main site [URL] When they have to enter their credit card details, they click on a link to open a window ([URL]). The details are verified and if valid, the customer is returned to the confirmation page in the parent screen ([URL]) and the payment window is closed. Pop-up blockers are causing problems here but even when pop-up blockers are disabled, the confirmation page loads in a new window.
It seems that if I use jquery in https and do an ajax call out and then update the dom with the resulting html I get an HTTPS unsecure content warning. Now the content is all https and there are not http calls any where so I'm wondering if this has been seen before. I've dug very deep looking for the issus and if I take jquery out of the equation it doesn't give me an error. But I've standardized jquery as part of the site and don't want to mix straight old javascript with jquery, if I can avoid it.
I have a text field for a user to enter a URL. When I call the form data with PHP I'm adding the http:// into the link like this: <a href="http://' . $url . '">I'm wondering if javascript check to see if the user has entered the http:// and if so, remove it.
I have a onClick event in Javascript, What I would like to do is if a PHP variable were to be set, to trigger the Javascript onClick event. Is there a way to simulate an onClick? [URL]I have a form with some non-showing (non hidden) input fields but they show if I click a + and hide if I click -, default is hide, but if a certain PHP var were set I want to somehow simulate that + was clicked. I tried to force 'var lText' but that got the whole thing stuck in one state.
Many modern libraries implement this type of function (I know prototype does), but it's a great one to have in your common.js in case you don't need a full library for projects.
The basic idea is that using .innerHTML to insert new elements is very convenient because you can simply provide a string of the new HTML, but you lose the precision of DOM insertion (for instance, if you want to insert a new element in the middle of a bunch of DOM siblings, you have to replace them all in the parents innerHTML).
Conversely, using DOM methods like insertBefore() are very precise but require you to make the entire structure with createElement calls. This can be a LOT of code when all you want to do is insert a new anchor element.
This elegant little solution combines both methods by riding on the fact than when you replace an element's innerHTML, the browser creates the appropriate DOM hierarchy for the new elements on the fly. So this function takes a string of HTML you want to make into a DOM structure, changes the innerHTML of a dummy element to render this structure, and then returns the first child.
// fromHTML() function fromHTML(html) { var root = document.createElement(‘div’); root.innerHTML = html; return root.firstChild; }
Very simple to use, and very handy:
var node = fromHTML(’<a href=”home.html” title=”Going Home”> <strong>There’s no place like it</strong></a>’);
// Now you can use the precision of DOM methods without having // to create the entire structure by hand: element.insertBefore(thing, node);
I have two jQuery scripts running on the same page. One of them dynamically assigns height parameters to the wordpress page. The other is a slideshow script which makes images transition from one to the next in a slideshow.When the slideshow is inserted into the wordpress page, it works fine, but in IE7 there is extra page height whenever there is a slideshow on the page. In other browsers it is fine, and on other pages that dont have a slideshow the page height is fine.Looking at the source code, it seems that the dynamically assigned div height paramaters that are injected into the slideshow divs by the jQuery slideshow script are getting involved in other divs on the page, influencing their height.It seems that the slideshow script is interfering with the page height script. how can I make it so they dont entangle? Here is the page height jQuery script that assigned dynamic height to the "art-content-layout-row" div (the div that controls page height)
Code:
/* begin Layout */ jQuery(function () { if (!jQuery.browser.msie || parseInt(jQuery.browser.version) > 7) return;
[code]...
When looking at the html source in the page, the slideshow script inserts this jQuery unique number beside the dynamically added div parameters in the slideshow divs like this:
It turns out that this same unique number is assigning itself to the art-content-layout-row div which is supposed to be controlled by the other script.I am wondering if the fact that these unique id numbers being the same is causing the issue, as though the system is thinking that these two scripts are somehow the same one?Both scripts are in different directories and called separately in the page footer.
Many time i am getting one problem with Jquery when i am using more then one jquery plugin on same page then only one plugin works which will be on top. I guess few variables mixing and disturbing to each other. I just want to know is there any way to control it?
I'm looking for a while for doc's to understand how to delelop my own https client to automate some tasks.
The website, I try to use for example, contains a javasript to provide for login (URL: https://www.cortalconsors.de/euroWebDe/-). I've attached the part of the code which is supplies the login fields (probably easier to read when browsing the source code of the page). I've no idea, how the POST should look like to do the login.....
Basically I have a WinXP machine (SP1 with all web updates don't want to upgrade to SP2 until this issue is resolved) and IE 6 (all web updates).
If I am on a secure (https) site none of the hyperlinks seem to work. As I mouseover the relevant links are shown in the status bar (ie another page or site), but when I click on these links nothing happens at all. Its as if something is blocking the process of firing these links. NOTE: I can click on form buttons OK and the exact same links work fine on 3 other machines that I have.
I am trying to write a tool (say [URL])The tool contains a list of https urls (say [URL]) given as a hyperlinks (say abc) on clicking the url the http status code of the https page should be displayed in the same page.. Is this possible? I am currently using the following code snippet.. function sendRequest(url){ var client = new XMLHttpRequest(); client.onreadystatechange = function(){ if (this.readyState == 4) alert(client.status); } client.open("GET", url, true); client.send(null); } This seems to be working if the url given is http url but I have to get status for https url for a non-secure (http) url.
Is this the right way to call this https request or I need to do some other authentication also Currently it does not work in iphone It return's json data in firefox,chorme,IE ,safari but doesn't return it in iphone
I am making a site and I have an SSL certificate installed in the hosting. The problem I have is that any body can enter in the site's directories/files with https and also with http protocol :eek: .
I do not know how to do, so when some body try to open the directories/files with http the site is opened only with https protocol. With .htaccess, javasript, php, ??????
I'm trying to dynamically set the height of my Iframe. my https: main page is calling another https in an Iframe. But i get an access denied error from my javascript trying to call the parent document.
Main https page <IFRAME APPLICATION="yes" style="width:100%;" id="iframename" frameborder="no" scrolling="no" SRC="https://www.otherdomain.com">
otherdomain.com html ------------------------------------------------ <script> function bodyheight() { x = document.body.scrollHeight parent.document.all.iframename.style.height = x } </script>
I am developing a mobile web app which communicates with a wcf service that returns data in json format. The way security is handled is the user logins and recieves a token which is added to the http header. The login ajax request which passes the url strings to the service is using https protocol. This works fine. The other 2 ajax requests are also supposed to use https but when I do this the custom header isn't added. If I use http which is the old url, the custom header is added to http header. I have tested this using fiddler2 and firebug and for some reason it doesn't like https in the ajax request url.
function login_service() { //$.mobile.pageLoading(); var stringUsername = $('#txtUsername').val(); var stringPassword = $('#txtPassword').val();