IE 7 non secure items warning with JSF 1.2

[Sri Thuraisamy]

The issue has been reported before in the mailing list and still haven't got any solutions. After looking into the way page is generated this is what I found

1. I created simple JSP with label component and the warning message came with "page containes secure and nonsecure items ..." .

2. I took the page source and save in to html put it in the same site and I got the same message again.

3. Then modify the html by replacing absolute path instead of relative path for loading bootstrap.js and it worked fine. I didn't get the warnign pop message this time.

4. This URL is generated by JSF rendering process. Is it possible to change/set the renderer to parse with absolute URL when loading javascript libraries? Below line is the one I changed 

default rendered

    <script type="text/javascript" src="/testie2/theme/com/sun/webui/jsf/suntheme4_2-080320/javascript/bootstrap.js">

Modified html with changed line (Working without warning message)

    <script type="text/javascript" src="https://our.testserver.com/testie2/theme/com/sun/webui/jsf/suntheme4_2-080320/javascript/bootstrap.js">

If any one can help or point where I can change the code of Woodstock to render absolute URL for loading java libraries, That may be helpful to look into this issue further

Thanks/Regards

Sri Thuraisamy

Senior Enterprise Architect

Solidifi Inc.
50 Minthorn Blvd., Suite 301, Markham, ON,  L3T 7X8
Tel : [phone] ext 1230

Cel: 416-723-9994
Fax: [phone]
www.solidifi.com

HIS MESSAGE IS INTENDED ONLY FOR THE ADDRESSEE, IT MAY CONTAIN PRIVILEGED
OR CONFIDENTIAL INFORMATION. ANY UNAUTHORIZED DISCLOSURE IS STRICTLY
PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE NOTIFY US
IMMEDIATELY SO THAT WE MAY CORRECT OUR INTERNAL RECORDS. PLEASE THEN DELETE
THE ORIGINAL MESSAGE. THANK YOU.

[=?ISO-8859-1?Q?M=E1rcio Gon=E7alves?=]

Good job, Sri Thuraisamy.

I'm waiting for the solution, too. I believe it's closer now.

Thanks,

Marcio Goncalves



 Sat, 28 Jun 2008 01:23:05 -0400, Sri Thuraisamy  escreveu:

The issue has been reported before in the mailing list and still haven't got any solutions. After looking into the way page is generated this is what I found

1. I created simple JSP with label component and the warning message came with "page containes secure and nonsecure items ..." .

2. I took the page source and save in to html put it in the same site and I got the same message again.

3. Then modify the html by replacing absolute path instead of relative path for loading bootstrap.js and it worked fine. I didn't get the warnign pop message this time.

4. This URL is generated by JSF rendering process. Is it possible to change/set the renderer to parse with absolute URL when loading javascript libraries? Below line is the one I changed

default rendered

Modified html with changed line (Working without warning message)

https://our.testserver.com/testie2/theme/com/sun/webui/jsf/suntheme4_2-080320/javascript/bootstrap.js">

If any one can help or point where I can change the code of Woodstock to render absolute URL for loading java libraries, That may be helpful to look into this issue further

Thanks/Regards

Sri Thuraisamy

Senior Enterprise Architect

Solidifi Inc.
50 Minthorn Blvd., Suite 301, Markham, ON, L3T 7X8
Tel : [phone] ext 1230

Cel: 416-723-9994
Fax: [phone]
www.solidifi.com

HIS MESSAGE IS INTENDED ONLY FOR THE ADDRESSEE, IT MAY CONTAIN PRIVILEGED
OR CONFIDENTIAL INFORMATION. ANY UNAUTHORIZED DISCLOSURE IS STRICTLY
PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE NOTIFY US
IMMEDIATELY SO THAT WE MAY CORRECT OUR INTERNAL RECORDS. PLEASE THEN DELETE
THE ORIGINAL MESSAGE. THANK YOU.



---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@...
For additional commands, e-mail: dev-help@...

[richard ratta]

Its been a while since I've responded to this thread, but the problem is
really
related to the paths that are referenced in the CSS files.

These paths cannot have absolute paths and must have relative paths.

We do not plan to parse these CSS files at runtime to "fix up" the paths
based on
on browser.

-rick

Márcio Gonçalves wrote:

>Good job, Sri Thuraisamy.
>
>I'm waiting for the solution, too. I believe it's closer now.
>
>Thanks,
>
>Marcio Goncalves
>
>
>
> Sat, 28 Jun 2008 01:23:05 -0400, Sri Thuraisamy  escreveu:
>
>The issue has been reported before in the mailing list and still haven't got any solutions. After looking into the way page is generated this is what I found
>
>1. I created simple JSP with label component and the warning message came with "page containes secure and nonsecure items ..." .
>
>2. I took the page source and save in to html put it in the same site and I got the same message again.
>
>3. Then modify the html by replacing absolute path instead of relative path for loading bootstrap.js and it worked fine. I didn't get the warnign pop message this time.
>
>4. This URL is generated by JSF rendering process. Is it possible to change/set the renderer to parse with absolute URL when loading javascript libraries? Below line is the one I changed
>
>default rendered
>
>Modified html with changed line (Working without warning message)
>
>https://our.testserver.com/testie2/theme/com/sun/webui/jsf/suntheme4_2-080320/javascript/bootstrap.js">
>
>If any one can help or point where I can change the code of Woodstock to render absolute URL for loading java libraries, That may be helpful to look into this issue further
>
>Thanks/Regards
>
>Sri Thuraisamy
>
>Senior Enterprise Architect
>
>Solidifi Inc.
>50 Minthorn Blvd., Suite 301, Markham, ON, L3T 7X8
>Tel : [phone] ext 1230
>
>Cel: 416-723-9994
>Fax: [phone]
>www.solidifi.com
>
>HIS MESSAGE IS INTENDED ONLY FOR THE ADDRESSEE, IT MAY CONTAIN PRIVILEGED
>OR CONFIDENTIAL INFORMATION. ANY UNAUTHORIZED DISCLOSURE IS STRICTLY
>PROHIBITED. IF YOU HAVE RECEIVED THIS MESSAGE IN ERROR, PLEASE NOTIFY US
>IMMEDIATELY SO THAT WE MAY CORRECT OUR INTERNAL RECORDS. PLEASE THEN DELETE
>THE ORIGINAL MESSAGE. THANK YOU.
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: dev-unsubscribe@...
>For additional commands, e-mail: dev-help@...
>
>  
>

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@...
For additional commands, e-mail: dev-help@...

[MitkoD]

We have found a workaround for this problem with Woodstock causing security message in IE "this page contains both secure and insecure items" when working under HTTPS. We posted an article how to solve it on our dev blog. Hope that works for you too.

http://mentormate.com/blog/netbeans-visual-jsf-editor-tutorial-web-applications-running-https-displaying-warning-page-secure-nonsecure-items-2/