views:

653

answers:

1

In IE it is giving me the "some items on the page are not secure" message. I have tracked it down to this line:

<script type="text/javascript" src="lightbox/js/prototype.js"></script>

which is a lightbox script I downloaded. I tried making the src relative or absolute with https it happens either way. And only in IE.

Heres the page if you need to see it: Clicky

Thanks!

+2  A: 

Looking at your page in Fiddler, I see a request to https://www.kranichs.com/images/bottombax_02.jpg, which is a 404.

IE considers the 404 error message as unsafe content, so if you are including that (in an IFRAME or something) then you will see the mixed content error. Fix that and see what happens.

If nothing changes when that file exists, and you don't see any HTTP requests in Fiddler, it's possibly the removeChild problem - if you remove a DIV with a background image (as a lightbox might) then you will see the mixed content error.

crb
FWIW: A securely-returned 404 will not cause this problem. A redirect from a secure page to an insecure page, OTOH, will.
EricLaw -MSFT-
I was referring to the page that it displays if you don't provide a specific 404 page yourself, but I trust that you'll know better than I here. Thanks for Fiddler, Eric; I'd be lost without it!
crb