You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tapestry.apache.org by "Anna Vo (JIRA)" <ta...@jakarta.apache.org> on 2007/02/05 17:39:05 UTC

[jira] Created: (TAPESTRY-1254) IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component

IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component
---------------------------------------------------------------------------

                 Key: TAPESTRY-1254
                 URL: https://issues.apache.org/jira/browse/TAPESTRY-1254
             Project: Tapestry
          Issue Type: Bug
          Components: JavaScript
    Affects Versions: 4.1.1, 4.1.2
         Environment: IE7, win xp
            Reporter: Anna Vo
            Priority: Minor


Using Tap 4.1.1 and 4.1.2 snapshots, Dialog component on secure SSL pages gives "This page contains both secure and 
nonsecure items" warning message. Does not happen in IE6.

See iframe.js and other related files: if(dojo.render.html.ie55 || dojo.render.html.ie60) {var html="<iframe src='javascript:false'" ....

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org


[jira] Reopened: (TAPESTRY-1254) IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component

Posted by "Anna Vo (JIRA)" <ta...@jakarta.apache.org>.
     [ https://issues.apache.org/jira/browse/TAPESTRY-1254?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Anna Vo reopened TAPESTRY-1254:
-------------------------------


This issue still occurs after updating to the 4.1.2-20070206.050455 snapshot. After adding  "|| dojo.render.html.ie70" to the ie55 or ie60 conditional in iframe.js the secure message still displays.

> IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component
> ---------------------------------------------------------------------------
>
>                 Key: TAPESTRY-1254
>                 URL: https://issues.apache.org/jira/browse/TAPESTRY-1254
>             Project: Tapestry
>          Issue Type: Bug
>          Components: JavaScript
>    Affects Versions: 4.1.1, 4.1.2
>         Environment: IE7, win xp
>            Reporter: Anna Vo
>         Assigned To: Jesse Kuhnert
>            Priority: Minor
>
> Using Tap 4.1.1 and 4.1.2 snapshots, Dialog component on secure SSL pages gives "This page contains both secure and 
> nonsecure items" warning message. Does not happen in IE6.
> See iframe.js and other related files: if(dojo.render.html.ie55 || dojo.render.html.ie60) {var html="<iframe src='javascript:false'" ....

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org


[jira] Resolved: (TAPESTRY-1254) IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component

Posted by "Jesse Kuhnert (JIRA)" <ta...@jakarta.apache.org>.
     [ https://issues.apache.org/jira/browse/TAPESTRY-1254?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jesse Kuhnert resolved TAPESTRY-1254.
-------------------------------------

    Resolution: Fixed
      Assignee: Jesse Kuhnert

Fixed with dojo upgrade. (i hope)

> IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component
> ---------------------------------------------------------------------------
>
>                 Key: TAPESTRY-1254
>                 URL: https://issues.apache.org/jira/browse/TAPESTRY-1254
>             Project: Tapestry
>          Issue Type: Bug
>          Components: JavaScript
>    Affects Versions: 4.1.1, 4.1.2
>         Environment: IE7, win xp
>            Reporter: Anna Vo
>         Assigned To: Jesse Kuhnert
>            Priority: Minor
>
> Using Tap 4.1.1 and 4.1.2 snapshots, Dialog component on secure SSL pages gives "This page contains both secure and 
> nonsecure items" warning message. Does not happen in IE6.
> See iframe.js and other related files: if(dojo.render.html.ie55 || dojo.render.html.ie60) {var html="<iframe src='javascript:false'" ....

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org


[jira] Commented: (TAPESTRY-1254) IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component

Posted by "Greg Woolsey (JIRA)" <de...@tapestry.apache.org>.
    [ https://issues.apache.org/jira/browse/TAPESTRY-1254?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12498056 ] 

Greg Woolsey commented on TAPESTRY-1254:
----------------------------------------

I found the problem - it's in dojo.a11y.testAccessible()

See this Blog entry I found:

http://davidovitz.blogspot.com/2006/09/https-bug-in-ie.html

All that is needed in the above function is this line before the removeChild() call at the end:

div.style.backgroundImage = ""; 

I overrode this method in my local code and it got rid of the mixed content warning.  Looks like a bug report needs to be filed with Dojo (I don't have access to that).

This code is called whenever a widget is built, from widget.js, which is also why I noticed so many requests for  tab_close.gif in my server log.

> IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component
> ---------------------------------------------------------------------------
>
>                 Key: TAPESTRY-1254
>                 URL: https://issues.apache.org/jira/browse/TAPESTRY-1254
>             Project: Tapestry
>          Issue Type: Bug
>          Components: JavaScript
>    Affects Versions: 4.1.1, 4.1.2
>         Environment: IE7, win xp
>            Reporter: Anna Vo
>         Assigned To: Jesse Kuhnert
>            Priority: Minor
>             Fix For: 4.1.2
>
>
> Using Tap 4.1.1 and 4.1.2 snapshots, Dialog component on secure SSL pages gives "This page contains both secure and 
> nonsecure items" warning message. Does not happen in IE6.
> See iframe.js and other related files: if(dojo.render.html.ie55 || dojo.render.html.ie60) {var html="<iframe src='javascript:false'" ....

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org


[jira] Commented: (TAPESTRY-1254) IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component

Posted by "Greg Woolsey (JIRA)" <de...@tapestry.apache.org>.
    [ https://issues.apache.org/jira/browse/TAPESTRY-1254?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12497997 ] 

Greg Woolsey commented on TAPESTRY-1254:
----------------------------------------

I get this on only one page in our app, that _doesn't_ use our standard border component (wrapping a Shell component).  I can't find any differences in the rendered JavaScript that would account for the problematic behavior.  It happens on all widgets based on dojo.widget.Dialog, only on this one page.  All pages use derivatives of this widget, from the Tapestry validation dialog to our custom replacements for window.alert() and window.confirm().  We only get the mixed content warning the first time this one page tries too create a widget for a subclass of dojo.widget.Dialog.

Using Fiddler and IEHTTPAnalyzer, I don't see any browser requests via HTTP or HTTPS at widget creation time, and there is no IFRAME generated either on IE7, as it doesn't need one and the logic for the background IFRAME specifies only IE 5.5 and IE6.

I'm stumped as to where the mixed content warning is coming from - it must be some sort of invalid (ie malformed) request that results in an IE internal error page response, as those are flagged as "insecure" by the browser, and would account for why Fiddler and IEHTTPAnalyzer never saw the request.

> IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component
> ---------------------------------------------------------------------------
>
>                 Key: TAPESTRY-1254
>                 URL: https://issues.apache.org/jira/browse/TAPESTRY-1254
>             Project: Tapestry
>          Issue Type: Bug
>          Components: JavaScript
>    Affects Versions: 4.1.1, 4.1.2
>         Environment: IE7, win xp
>            Reporter: Anna Vo
>         Assigned To: Jesse Kuhnert
>            Priority: Minor
>             Fix For: 4.1.2
>
>
> Using Tap 4.1.1 and 4.1.2 snapshots, Dialog component on secure SSL pages gives "This page contains both secure and 
> nonsecure items" warning message. Does not happen in IE6.
> See iframe.js and other related files: if(dojo.render.html.ie55 || dojo.render.html.ie60) {var html="<iframe src='javascript:false'" ....

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org


[jira] Updated: (TAPESTRY-1254) IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component

Posted by "Jesse Kuhnert (JIRA)" <ta...@jakarta.apache.org>.
     [ https://issues.apache.org/jira/browse/TAPESTRY-1254?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jesse Kuhnert updated TAPESTRY-1254:
------------------------------------

    Fix Version/s: 4.1.2

> IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component
> ---------------------------------------------------------------------------
>
>                 Key: TAPESTRY-1254
>                 URL: https://issues.apache.org/jira/browse/TAPESTRY-1254
>             Project: Tapestry
>          Issue Type: Bug
>          Components: JavaScript
>    Affects Versions: 4.1.1, 4.1.2
>         Environment: IE7, win xp
>            Reporter: Anna Vo
>         Assigned To: Jesse Kuhnert
>            Priority: Minor
>             Fix For: 4.1.2
>
>
> Using Tap 4.1.1 and 4.1.2 snapshots, Dialog component on secure SSL pages gives "This page contains both secure and 
> nonsecure items" warning message. Does not happen in IE6.
> See iframe.js and other related files: if(dojo.render.html.ie55 || dojo.render.html.ie60) {var html="<iframe src='javascript:false'" ....

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org


[jira] Resolved: (TAPESTRY-1254) IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component

Posted by "Jesse Kuhnert (JIRA)" <de...@tapestry.apache.org>.
     [ https://issues.apache.org/jira/browse/TAPESTRY-1254?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jesse Kuhnert resolved TAPESTRY-1254.
-------------------------------------

    Resolution: Fixed

Cool thanks Greg!  I took that a11y crap out in the latest 0.4.3 upgrade of dojo anyways because the remote image fetches it was doing were invasive / annoying / poor design to begin with. 



> IE7 mixed secure/nonsecure SSL warning on https using dojo dialog component
> ---------------------------------------------------------------------------
>
>                 Key: TAPESTRY-1254
>                 URL: https://issues.apache.org/jira/browse/TAPESTRY-1254
>             Project: Tapestry
>          Issue Type: Bug
>          Components: JavaScript
>    Affects Versions: 4.1.1, 4.1.2
>         Environment: IE7, win xp
>            Reporter: Anna Vo
>            Assignee: Jesse Kuhnert
>            Priority: Minor
>             Fix For: 4.1.2
>
>
> Using Tap 4.1.1 and 4.1.2 snapshots, Dialog component on secure SSL pages gives "This page contains both secure and 
> nonsecure items" warning message. Does not happen in IE6.
> See iframe.js and other related files: if(dojo.render.html.ie55 || dojo.render.html.ie60) {var html="<iframe src='javascript:false'" ....

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tapestry.apache.org
For additional commands, e-mail: dev-help@tapestry.apache.org