View Issue Details

Jump to Notes
IDProjectCategoryView StatusDate SubmittedLast Update
0001018OXID eShop (all versions)4.07. Source code, Testpublic2009-06-16 09:192012-12-10 13:45
Reportersimply because Assigned To 
PriorityhighSeveritymajorReproducibilityalways
Status resolvedResolutionfixed 
Product Version4.1.2 revision 18998 
Fixed in Version4.2.0 revision 23610 
Summary0001018: Security Warning in Internet Explorer 6
DescriptionUsing the Internet Explorer 6 and changing from non-SSL to SSL during the order process will show the security warning of IE 6.

The reason is this code in the _footer.tpl

<!--[if lt IE 7]><script type="text/javascript">oxid.popup.addShim();</script><![endif]-->

TagsNo tags attached.
Theme
BrowserInternet Explorer 6.x or older
PHP Version5.2.6
Database Version5.0.33

Activities

alfonsas_cirtautas

2009-08-26 13:38

reporter   ~0001525

is valid SSL certificate used ?

alfonsas_cirtautas

2009-09-11 09:49

reporter   ~0001712

Reminder sent to: simply because

is valid SSL certificate used ?

simply because

2009-09-11 09:52

reporter   ~0001713

Last edited: 2009-09-11 09:53

 Sorry, did not receive your first message.

It's a "thawte SSL123 Certificat".
Just check it under high-feelings.de

alfonsas_cirtautas

2009-09-11 13:40

reporter   ~0001715

Last edited: 2009-09-11 13:40

 Reminder sent to: simply because

Your ssl certificate is ok.

The warning message was not about bad ssl, but about mixed content.

I finaly found the problem. It is in the function addShim(), it inserts iframe to fix one ie6 problem, but causes another one (http://support.microsoft.com/default.aspx?scid=kb;en-us;261188)

alfonsas_cirtautas

2009-09-11 14:41

reporter   ~0001716

fixed IE6 SSL mixed content warning (MS Q261188).

Fix in file /out/basic/src/oxid.js

add "src" attribute with value "javascript:false;" to added iframe in function "addShim" (used only for IE6)

before:

addShim : function(){
     var _mk = document.getElementById('mask');
     if(_mk) {_mk.appendChild(document.createElement('iframe'));}
},

after:

addShim : function(){
     var _fr, _mk = document.getElementById('mask');
     if(_mk) {
         _fr = document.createElement('iframe');
         _fr.setAttribute('src','javascript:false;'); //MS Q261188
         _mk.appendChild(_fr);
     }
},