FancyBox over HTTPS?

[Bill]

I have a very weird situation on my hands. When I include the FancyBox
plugin it throws a security error in Internet Explorer and I can't
figure out why. If I don't include the library I don't get an error.
Does anyone know why this would happen?

[Bill]

For the record. I am including the file just like this...

<script type="text/javascript" src="/js/jquery-1.3.1.min.js"></script>
<script type="text/javascript" src="/js/
jquery.fancybox-1.2.1.pack.js"></script>

If I remove the jquery.fancybox-1.2.1.pack.js the error stops.

[Mike]

I have the same problem... there has been an issue filed
http://code.google.com/p/fancybox/issues/detail?id=9. There is a
patch in the issue, but I couldn't get it to work.

[Bryan]

I had the same issue, however my fix (which may or may not work with
you) was found within the CSS. If you did what I did, and copy the
example style sheet then you have this within the included style
sheet:

a#fancy_left, a#fancy_right {
position: absolute;
bottom: 0px;
height: 100%;
width: 35%;
cursor: pointer;
z-index: 111;
display: none;
background-image: url(data:image/gif;base64,AAAA);
outline: none;

the problem lies within - "background-image: url(data:image/
gif;base64,AAAA);"

I am not using this particular feature of FancyBox so I was able to
eliminate that style and thus, eliminate the error thrown by IE. now,
when I load up my page i do not get the dreaded " this page contains
both secure and nonsecure items" as i did when i included the above
mentioned style

I hope that this helps you - if not, well I tried.

Best,
Bryan

On Jul 3, 10:05 pm, Mike <mfrie...@gmail.com> wrote:
> I have the same problem... there has been an issue filedhttp://code.google.com/p/fancybox/issues/detail?id=9.  There is a

[Frederic Hemberger]

There are actually TWO issues (I just figured it out the hard way
*sigh*):

a) the data:image/gif issue as pointed out above,
b) in line 377:
$("#fancy_inner").prepend('<iframe class="fancy_bigIframe"
scrolling="no" frameborder="0"></iframe>');
Iframe lacks a source-attribute, which is expanded to "about:blank" by
IE, which is suspected insecure.

$("#fancy_inner").prepend('<iframe src="javascript:false;"
class="fancy_bigIframe" scrolling="no" frameborder="0"></iframe>');
does the trick.