[jboss-jira] [JBoss JIRA] Created: (JBPORTAL-2012) IE6 SSL iframe security warnings

[Ryan Carmichael (JIRA)]

IE6 SSL iframe security warnings
--------------------------------

                 Key: JBPORTAL-2012
                 URL: http://jira.jboss.com/jira/browse/JBPORTAL-2012
             Project: JBoss Portal
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: Portal Core, Portal Security, Portal Web
    Affects Versions: 2.6.4 Final
         Environment: Internet Explorer 6
            Reporter: Ryan Carmichael
         Assigned To: Julien Viet


IE6 displayed warning "This page contains both secure and nonsecure items" appears on every page when using SSL. This seems to be cause by IE6 not handling iframe src set to "". The fix is:

---
server/default/deploy/jboss-portal.sar/portal-core.war/layouts/common/modal.jsp

change iframe src=""
to
iframe src="javascript:''"
---

---
server\default\deploy\jboss-portal.sar\portal-core.war\WEB-INF\jsp\header\header.jsp

change 
<script type="text/javascript">
   //we don't need the iframe/modal if logged in
   document.getElementById('loginIframe').src = '';
</script>

to

<script type="text/javascript">
   //we don't need the iframe/modal if logged in
   document.getElementById('loginIframe').src = "javascript:''";
</script>
---

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira