[jira] Commented: (TOMAHAWK-402) error message on popup, when using SSL

["Ricardo Tercero Lozano (JIRA)" <de...@myfaces.apache.org>]

    [ http://issues.apache.org/jira/browse/TOMAHAWK-402?page=comments#action_12416331 ] 

Ricardo Tercero Lozano commented on TOMAHAWK-402:
-------------------------------------------------

I've the same issue with tomahawk-1.1.2. 

I think the problem is related to IFRAME creation (code from popcalendar.js):

org_apache_myfaces_PopupCalendar.prototype._hideElement = function(overDiv)
{

    if (document.all)
    {
        var iframe = document.getElementById(overDiv.id + "_IFRAME");

        if (iframe == null)
        {
            iframe = document.createElement("<iframe id='" + overDiv.id + "_IFRAME' style='visibility:hidden; position: absolute; top:0px;left:0px;'/>");
            this.containerCtl.appendChild(iframe);
        }

        this._recalculateElement(overDiv);
    }
}

The window pops up in IE when line 'this.containerCtl.appendChild(iframe)' is executed. I think the problem is due to iframe is created without a src='...' pointing to an https location. If I'm not wrong, iframe is by default created to point to an http location.

I can only reproduce this issue in IE with HTTPS urls.

> error message on popup, when using SSL
> --------------------------------------
>
>          Key: TOMAHAWK-402
>          URL: http://issues.apache.org/jira/browse/TOMAHAWK-402
>      Project: MyFaces Tomahawk
>         Type: Bug

>   Components: Calendar
>     Versions: 1.1.2-SNAPSHOT, 1.1.1, 1.1.3-SNAPSHOT
>  Environment: JBoss 4
>     Reporter: Stephan Sichhart
>     Assignee: Mario Ivankovits

>
> I get an error-message from IE when I push the popup-button of the inputcalendar component. This happens only when I use a SSL-Connection and Internet Explorer (Ver. 6) . 
> Error-Message: "This page contains both secure and nonsecure items. Do you want to display the nonsecure items?"
> It makes no difference to the component behavior, if I answer yes or no. 

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira