Annotated Time Line via HTTPS: Mixed secure/unsecure content warning in IE7

85 views
Skip to first unread message

rohitc

unread,
Feb 6, 2009, 1:48:49 PM2/6/09
to Google Visualization API
With reference to my recent post at:

http://groups.google.com/group/google-visualization-api/browse_thread/thread/8731c3d1365abbc8/834e06063df8d94d?lnk=gst&q=https#834e06063df8d94d

... I noticed that when serving HTTPS content from our site that
embeds a "Google's Visualization - Annotated Time Line", we get the
infamous "This page contains both secure and nonsecure items." warning
in Internet Explorer 7. We scanned our app (which is very
straightforward and contains NO absolute references to any URLs with
the HTTP protocol definition except for the reference to Google's Vis
API, no IFrames with missing SRC attributes, etc)

As indicated by the documentation, my HTML page contained a reference
to the gvis API as...

<script type='text/javascript' src='https://www.google.com/jsapi'></
script>

Note that I have changed the reference from http to https in this JS
reference which works.
However, execution of the JS code here has several internal references
to unsecure HTTP URLs as listed below...

Main Reference: https://www.google.com/jsapi
Internal Reference 1: var d="http://csi.gstatic.com/csi?
s=uds&v=2&action=

Main Reference:
https://www.google.com/uds/api/visualization/1.0/d442ac6e895f1e45e38b4ac27651dc3b/default,annotatedtimeline+en.I.js

Internal Reference 1: var kk="http://www.google.com/uds",
Internal Reference 2: Ek="http://www.google.com/ig/adde?
moduleurl=",
Internal Reference 3: &&xh("http://www.gmodules.com/gadgets/rpc/
rpc.v.js");
Internal Reference 4: var ve="http://www.google.com/uds",
Internal Reference 5: Xe='codebase="http://download.macromedia.com/
pub/shockwave/cabs/flash/swflash.cab#version=',Ye
Internal Reference 6: pluginspage="http://www.macromedia.com/go/
getflashplayer">',
Internal Reference 7: .<a href="http://www.macromedia.com/go/
getflash/">Get Flash</a>',

Not sure if one or more of these internal nonsecure HTTP (instead of
HTTPS) references causes the warning message but would be good if this
could be resolved.

Thanks in advance!

rohitc

unread,
Feb 11, 2009, 12:36:29 PM2/11/09
to Google Visualization API
Is this an acknowledged issue?
Is there a plan to roll out a fix to address this?
Is there a release schedule (approximate is okay) indicating how
frequently the annotated time line graph / server is upgraded?

VizGuy

unread,
Feb 12, 2009, 4:14:18 AM2/12/09
to google-visua...@googlegroups.com
Hi, and sorry for the late response.

We are looking at this issue.
I will post a time estimation as soon as we have any.

Thanks,
VizGuy
Reply all
Reply to author
Forward
0 new messages