DO NOT REPLY [Bug 37549] New: - IE gives mixed security warning in Site tab

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=37549>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=37549

           Summary: IE gives mixed security warning in Site tab
           Product: Lenya
           Version: 1.2.4
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P3
         Component: Navigation Framework
        AssignedTo: dev@lenya.apache.org
        ReportedBy: rdharner@netscape.net


The bug that Lee Carroll described at
http://mail-archives.apache.org/mod_mbox/lenya-user/200506.mbox/%3C005e01c57b6c$a9f6b7d0$0202a8c0@BEDE%3E
still exists in Lenya 1.2.4 and the 1.2.X branch.  For Lenya sites using SSL, IE
gives a mixed security warning ("This page contains both secure and nonsecure
items") when one accesses the site tab.

As a work-around, users can disable this warning in IE (Tools > Internet Options
> Security > Custom Level > Display mixed content).  But the real bug appears to
be in how the javascript code (lenya/resources/javascript/navtree.js) generates
URL's to gif's.  Lee's work-around of hard-coding the scheme and host in the
definition of IMAGE_PATH in line 53 of lenya/xslt/info/root.xsl is effective,
but we need to replace that hard-coded scheme and host with an <xsl:value-of
SOMETHING>.  What is that SOMETHING?  Alternatively, we could change how
navtree.js uses IMAGE_PATH so that the scheme and host are included when the
javascript runs.

The original line in root.xsl is:

IMAGE_PATH = "<xsl:value-of select="$contextprefix"/>/lenya/images/tree/";

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@lenya.apache.org
For additional commands, e-mail: dev-help@lenya.apache.org