# Secure and unsecure items

**URL:** <https://www.ruby-forum.com/t/secure-and-unsecure-items/105161>\
**Category:** Rails\
**Created:** [May 26, 2007, 11:33am UTC](https://www.ruby-forum.com/t/secure-and-unsecure-items/105161 "2007-05-26T11:33:19Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bas\_van\_Westing](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/85f322/32.png) [@Bas\_van\_Westing](https://www.ruby-forum.com/u/Bas_van_Westing)\
**Post date:** [May 26, 2007, 11:33am UTC](https://www.ruby-forum.com/t/secure-and-unsecure-items/105161/1 "2007-05-26T11:33:19Z")

</div>

Hi,

I host a secure ruby on rails appplication over https (at textdrive).  
All worked fine, untill I started using the javascript library ‘lowpro’  
with some additional script which does adjusts some layout when I resize  
the browser through window.onload & window.onresize events.

Now I get a “this page contains both secure and unsecure items” popup in  
IE6 for every page.

I’ve always used relative paths, and I am using relative paths now also.  
I used javascript libraries ‘effects’, ‘dragdrop’ & ‘controls’ before  
and I also use several AJAX requests. I never got this popup before.

Does anyone have a clue why I have this problem now?

Thanks,  
Bas

---

<div class="post-metadata">

**Author:** ![Bas\_van\_Westing](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/85f322/32.png) [@Bas\_van\_Westing](https://www.ruby-forum.com/u/Bas_van_Westing)\
**Post date:** [May 26, 2007, 2:02pm UTC](https://www.ruby-forum.com/t/secure-and-unsecure-items/105161/2 "2007-05-26T14:02:57Z")

</div>

Bas van Westing wrote:

> I’ve always used relative paths, and I am using relative paths now also.  
> I used javascript libraries ‘effects’, ‘dragdrop’ & ‘controls’ before  
> and I also use several AJAX requests. I never got this popup before.
> 
> Does anyone have a clue why I have this problem now?
> 
> Thanks,  
> Bas

Any chance that your Javascript file is not being served from the https  
site?

Cheers  
mohit.

---

<div class="post-metadata">

**Author:** ![Bas\_van\_Westing](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/85f322/32.png) [@Bas\_van\_Westing](https://www.ruby-forum.com/u/Bas_van_Westing)\
**Post date:** [May 26, 2007, 2:15pm UTC](https://www.ruby-forum.com/t/secure-and-unsecure-items/105161/3 "2007-05-26T14:15:10Z")

</div>

Mohit S. wrote:

> Any chance that your Javascript file is not being served from the https  
> site?

Thanks for your response, but that was not the problem. Bit I did find  
the reason however:

I use the lowpro.js library which defines the ‘Event.addBehaviour’  
method.  
The popup was triggered by this piece of javascript (which is served  
over https):

-----------START CODE----------------------------  
Event.addBehavior({  
‘#content’ : function() {  
MyFunctions.resize\_content()  
},

‘body’ : function () {  
$(document.body).setStyle( {  
overflow: ‘hidden’  
} );  
}

});  
-----------END CODE------------------------------

I now worked aroud this code with the following setup:

-----------START CODE----------------------------  
var MyFunctions = {

```
//....

init_on_load: function() {
   MyFunctions.hide_body_overflow()
   MyFunctions.resize_content()
}

```

};  
window.onload = MyFunctions.init\_on\_load  
-----------END CODE------------------------------

Not the IE6 popup is gone.

Regards,  
Bas

---

<div class="post-metadata">

**Author:** ![Bas\_van\_Westing](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/85f322/32.png) [@Bas\_van\_Westing](https://www.ruby-forum.com/u/Bas_van_Westing)\
**Post date:** [May 26, 2007, 2:30pm UTC](https://www.ruby-forum.com/t/secure-and-unsecure-items/105161/4 "2007-05-26T14:30:59Z")

</div>

Bas van Westing wrote:

> 

Great!

Cheers  
Mohit

---

<div class="post-metadata">

**Author:** ![Bas\_van\_Westing](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/85f322/32.png) [@Bas\_van\_Westing](https://www.ruby-forum.com/u/Bas_van_Westing)\
**Post date:** [May 26, 2007, 2:16pm UTC](https://www.ruby-forum.com/t/secure-and-unsecure-items/105161/5 "2007-05-26T14:16:46Z")

</div>

Bas van Westing wrote:

> I now worked aroud this code with the following setup:  
> I now worked around this code with the following setup:

> Not the IE6 popup is gone.  
> Now the IE6 popup is gone.