You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@myfaces.apache.org by "Werner Punz (JIRA)" <de...@myfaces.apache.org> on 2011/02/09 14:57:58 UTC

[jira] Issue Comment Edited: (TOMAHAWK-1389) TableSuggestAjax - security popup in IE7 when using SSL

    [ https://issues.apache.org/jira/browse/TOMAHAWK-1389?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12992473#comment-12992473 ] 

Werner Punz edited comment on TOMAHAWK-1389 at 2/9/11 1:56 PM:
---------------------------------------------------------------

Ok after trying to reproduce the bug on ie6 and ie8 ie7 mode which of course failed, I have revisited the patch which
apparently fixes the issue for the user. Besides the wrong outerHTML which is another issue (probably
the deleteNode from the myFaces 2 core JS should be integrated which works well over all browsers)
the only line in the patch which indicates a pointer to a fix for this issue is:

-div.style.backgroundImage="url(\""+this.imgPath+"/tab_close.gif\")";

which is part of an accessibility check which is non critical given tomahawks nature. We 
probably can safely remove this part.
I will fix this issue give the code a quick test and then set the bug to resolved.


      was (Author: werpu):
    Ok I tried the tableSuggestAjax demo now in both IE8 and IE8 IE7 mode this issue does not show up
What I am going to do now is simply to revert to a stock IE7 VM to be able to reproduce it. But also a check in the browser revealed no http connections on https...
That is with the latest tomahawk version.

  
> TableSuggestAjax - security popup in IE7 when using SSL
> -------------------------------------------------------
>
>                 Key: TOMAHAWK-1389
>                 URL: https://issues.apache.org/jira/browse/TOMAHAWK-1389
>             Project: MyFaces Tomahawk
>          Issue Type: Bug
>          Components: Alias Bean
>    Affects Versions: 1.1.8
>         Environment: myfaces 1.2.5
> tomahawk 1.1.8
> sandbox 1.1.7 snapshot
> facelets 1.1.14
> tomcat 6.16
> Apache mod_jk 2 (issue also comes up without mod_jk)
>            Reporter: Gerd Schaffer
>            Assignee: Werner Punz
>         Attachments: TOMAHAWK-1389.patch, dojo_patched.js
>
>
> A security popup comes up when using TableSuggestAjax in Internet Explorer 7 (IE7) when using SSL / HTTPS with the message:
> Warning: This page contains secure and non secure items ...
> Warnung: Diese Seite enthält sichere und nicht sichere Objekte ...
> TableSuggestAjax works in IE6, Mozilla, Safari and Google Chrome - just IE7 has this security-issue.
> what is going on in TableSuggestAjax component? Is there a possibility to fix this (with or without code change)?
> (telling IE7 not to report this errors (in ie-preferences) is not meant as fix)
> thank you in advance!

-- 
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira