Problems under https (SSL)

ozs · Post by **ozs** » Mon Apr 12, 2004 3:39 pm

I am using the menu in an Intranet site that uses SSL (sorry, no outside link).

Under some browsers (notably IE 5.50 under NT4), whenever the page loads, I get a warning "This page contains some unsecure items". I know this is caused by the menu because if I don't emit the menu, the problem goes away.
I'm not sure it is related, but I see a buch of "blank.html" links when I expand the "back" menu on the browser.

Does anybody know a way to fix this?

Maz · Post by **Maz** » Mon Apr 12, 2004 4:23 pm

When using a secure server you need the file blank in the directory.

maz

ozs · Post by **ozs** » Mon Apr 12, 2004 4:51 pm

A few questions then...

1. Where does that file need to exist? In the root directory or relative to the html file that uses the menu?
2. What is the exact name (including case)? blank.htm or blank.html (or something else?)
3. Out of curiosity: Why is this needed?

Thanks.

Maz · Post by **Maz** » Mon Apr 12, 2004 6:48 pm

Although someone else may be able to answer these questions better, I believe that it goes where your source file is. The file is in the download use that as is.

maz

Post by **Ruth** » Mon Apr 12, 2004 8:58 pm

It's something to do with IE, and iframes and them having an ID. Not, something I know about, but here are a few links. http://milonic.com/forum/viewtopic.php?t=3437 and http://milonic.com/forum/viewtopic.php?t=2365 and this is in one of the topics for the ms support on what the problem is http://support.microsoft.com/default.as ... -us;261188

Ruth

ozs · Post by **ozs** » Mon Apr 12, 2004 9:01 pm

Thanks!

fredericliow · Post by **fredericliow** » Wed Jun 30, 2004 10:30 am

Hi....guys....finally found one thread with relates to my problem. I have faced the same problem when using https. For my case, i dun have any error msg, except the multiple blank.html "created". I have followed the advice given here, by copy a blank.html to my source file but the multiple "blank.html" still created.

Can any kind people out here help me....pls....really urgent to slove this. Million Thanks....

fredericliow · Post by **fredericliow** » Wed Jun 30, 2004 10:31 am

help

Post by **Andy** » Wed Jun 30, 2004 10:50 am

Have you got a URL that we can see?

This will help a lot so we can see the problem and offer you a solution.

Cheers
Andy

fredericliow · Post by **fredericliow** » Wed Jun 30, 2004 11:07 am

the site is still inside client intranet....i'm figure a way for making it online

vp70 · Post by **vp70** » Wed May 04, 2005 8:40 pm

you don't need to use blank.htm to fix this problem.

add src attribute to iframe equal to javascript:false.

example:
<iframe src="javascript:false;">

Bob Martin · Post by **Bob Martin** » Tue Jun 28, 2005 4:48 pm

I ran into the same problem recently; will the menu base source be changed to instead use the src="javascript:false;" approach instead of Blank.html?

Besides being more graceful, it will reduce the number of page hits.

Post by **Ruth** » Tue Jun 28, 2005 7:34 pm

Hi Bob,

Long time.....

I think the problem has to do with IE not the menu. The information says that it occurs under ssl in IE when a page has an iframe if the iframe does not have an src specified. Without that "Microsoft Internet Explorer is unable to determine if the SRC attribute of the IFRAME is secure or unsecure". According to MS, "To resolve this problem for a page that will be downloaded through SSL, set the SRC attribute of the IFRAME. If the IFRAME is not expected to have a SRC attribute initially, point the IFRAME to a dummy HTML page."

As far as I know there's nothing to set in the menu, but rather in the iframe.

Ruth

Bob Martin · Post by **Bob Martin** » Wed Jun 29, 2005 1:26 pm

Hi Ruth,

Actually, by looking at the rendered source I do indeed see an <iframe> being added by Milonic when a menu is being built.

Here is a snippet of code I see for one page:

Code: Select all

<DIV class=mmenu onselectstart=return id=menu0 onmouseover=stopClose() style="BORDER-RIGHT: #999999 1px solid; PADDING-RIGHT: 0px; BORDER-TOP: #999999 1px solid; PADDING-LEFT: 0px; Z-INDEX: 499; BACKGROUND: #ffffa1; VISIBILITY: hidden; PADDING-BOTTOM: 0px; BORDER-LEFT: #999999 1px solid; PADDING-TOP: 0px; BORDER-BOTTOM: #999999 1px solid; POSITION: absolute; TOP: -999px" onmouseout=startClose() _f></DIV>

<IFRAME class=mmenu id=iF0 style="FILTER: Alpha(Opacity=0); LEFT: 1px; VISIBILITY: hidden; POSITION: absolute" src="/blank.html" frameBorder=0></IFRAME>

As you can see, Milonic is trying to self-correct the problem by assigning a blank.html file (which they include in their samples ZIP file)... but I still think that a more graceful solution would be to use a script solution for the SRC attribute, especially if you have quite a few menus on a page.

What do you think?

Bob

Post by **Ruth** » Wed Jun 29, 2005 2:57 pm

I have not a clue, Bob

What's a rendered source? Well, I can kind of figure out what it is

Now, all kidding aside at my lack of knowledge of any kind of programming, I don't know if changing the scr in the program might cause a problem [since I don't really know what the program is doing] Would it do something to actual iframes on pages? What if someone needs a page in the iframe on load, would that interfere with putting a page in the src attribute?

Ruth

Bob Martin · Post by **Bob Martin** » Wed Jun 29, 2005 3:30 pm

Ruth,

I view the rendered source from within IE via a right-click context menu item called, appropriately enough, View Rendered Source, which can be downloaded from http://billfriedrich.tripod.com/index.html?Web

I don't think changing the source to something contextually appropriate (depending on which browser is in use) would adversely affect a page's layout. For IE, the suggestion on using << Javascript:return false; >> seems like a good idea, but I honestly haven't verified that it would in fact work

But at least now I know why the Blank.html page is in the downloaded ZIP files from Milonic

And don't worry - I'm still trying to figure out how to program in all these different environments (mostly AS/400) I have to deal with on a daily basis

Post by **Ruth** » Thu Jun 30, 2005 5:30 pm

Hi Bob,

Well, I checked and I asked Andy. It seems that Milonic tried using javascript:false in the programming and it cause all kinds of problems. So, Milonic will never use javascript:false inside. What is now used was developed in consultation with Honeywell, Microsoft and Milonic.

I'm wondering if putting that in the actual iframe on the page will do what you want?

Ruth

Bob Martin · Post by **Bob Martin** » Thu Jun 30, 2005 7:41 pm

Hi Ruth,

Well, I actually am already using it within an iframe'd page (which has a SRC attribute) which is referenced within a page consisting of several iframes (header, menu, main, footer)... with several menus used in the main iframe for various purposes.

But it's good to know that the Javascript approach was tried but ruled out...and I can certainly live with the Blank.html approach.

Guess maybe I should complain to Microsoft

Thanks for the looking into it, though - I appreciate it!

Milonic JavaScript Menu

Problems under https (SSL)

Problems under https (SSL)

Urgent help needed

Agreed...