Empty iframe src causes security warning popup in IE6
August 28, 2008 - 9:03am — bonevich
| Project: | History |
| Version: | 1.0.0-beta-1 |
| Component: | Code |
| Category: | bug report |
| Priority: | critical |
| Assigned: | Unassigned |
| Status: | active |
Description
In the code for the init method on History, an iframe is created if the browser is msie. Line 35 has the following:
$("body").prepend('<iframe id="jQuery_history" style="display: none;"></iframe>');This causes problems in IE6 when the site is served over HTTPS, as you get the "This page contains both secure and nonsecure items." (see http://gemal.dk/blog/2005/01/27/iframe_without_src_attribute_on_https_in...)
To resolve this problem, I have modified the above line of code to the following:
$("body").prepend('<iframe id="jQuery_history" style="display: none;" src="javascript:false;"></iframe>');jeff bonevich
sr application developer
compendia bioscience, inc.
ann arbor, mi