views:

353

answers:

3

I have few images on a web page which are fetched from http server while whole web page is on https. So in internet explorer 7 & 8 , I get this pop up of "This page contains both secure and non-secure items" . Majority of users use internet explorer. Somehow they are getting worried about this pop-up. Even though I told some of the users about settings in IE, I fear about telling it everyone. Does anyone know how I can disable this pop-up through javascript or any other way where the control will be in my hand?

+5  A: 

You can't disable the popups. If you could, that's what the bad guys would do, and then there'd be no point to the security popup.

Move your images to your secure server, and the popups will go away because there's nothing being served unsecurly on a secure page.

Tom Ritter
Sounds good, but firefox works perfectly.
yogsma
+1  A: 

No you cannot disable it. It is a security feature of the browser. It prevents possible cross site scripting XSS for secure sites.

Your best bet is to host all images, css, javascripts, etc from the secure server also.

Jennifer Zouak
A: 

Can encrypting the images' path solve this problem?

yogsma
no it cannot. lots of browser developers think hard to prevent these kinds of exploits. to protect the end users.
Jennifer Zouak
Thanks Jennifer, I solved the issue by putting those images on server somehow.
yogsma