如何追踪“此页面包含安全和不安全的项目”
据我所知，没有不安全的项目 --- 当我使用 IE7 或 FireFox 3 浏览该网站时，我没有收到任何此类警告，但如果我使用 IE6 访问该网站，我会收到安全信息对话框“此页面包含安全和非安全项目，您想显示非安全项目吗？”
我怎样才能找到该消息的原因？
As far as I can tell, there are no unsecure items --- when I browse to the site with IE7 or FireFox 3 I don't get any such warning, but if I hit the site with IE6 I get the security informaiton dialog box "This page contains both secure and nonsecure items Do you want to display te nonsecure items?"
How can I track down the cause of that message?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（5）
源代码”（或类似的。我不
有英文IE）。
“http://”并将其替换为
https:// 在您的代码中。
source code" (Or similar. I don't
have an English IE).
"http://" and replace it with
https:// in your code.
过去，跨站点图像经常给我带来这个问题。
如果您使用的是 Firefox，则可以使用 HttpFox 插件执行 Eric TenEyck 建议您使用 Fiddler 执行的操作。
另外，请确保在 IE7 安全设置中将显示混合内容设置为“提示”。
Cross-site images often caused this problem for me in the past.
If you are using Firefox, you can use the HttpFox Add-on to do what Eric TenEyck suggested you do with Fiddler.
Plus make sure in your IE7 Security Settings you have Display mixed content set to "Prompt".
清除缓存后使用 Fiddler。 它将显示您的网络浏览器从远程站点获取的所有内容。 寻找任何不是 https 的内容。
Use Fiddler, after clearing your cache. It'll show everything that your web browser fetches from the remote site. Look for anything that's not https.
事实证明，这与不安全流量本身无关，而是与其中一个 HTML 男孩所做的黑客攻击有关——他们在页面上放置了一个空的 iframe（没有源），这样他们就可以在其上放置一些内容 --- 将 iframe 从代码中删除，警告对话框就消失了。 IE7/8和FF不这样做。
添加空白.gif 后，我们可以通过 https 访问该 gif（真痛苦），现在一切都很好。
As it turns out it has nothing to do with nonsecure traffic per se, but with a hack that one of the HTML boys did --- they have an empty iframe (without a source) that they place on the page, so they can then do some placed content on top of that --- gut the iframe out of the code and the warning dialog box went away. IE7/8 and FF doesn't do it.
AFter adding a blank.gif we're able to https to that gif (what a pain) and now it's all good.
如果您有一个以
http://而不是https://开头的链接，它会标记这些警告。好消息是，至少有一些商业网站（例如 Adobe，针对 Flash）提供了重定向到
http://的https://版本网站，以便您可以绕过这些警告。既然你提到了IE6； 我还会检查您在 IE6 中的安全级别设置。
If you have a link that starts with
http://instead ofhttps://it'll flag those warnings.The good news is that at least some commercial websites (like Adobe, for Flash) provide
https://versions of their site that redirect tohttp://so that you can get around those warnings.Since you mentioned IE6; I'd also check your security level setting in IE6.