Reply to thread

Message: [QUOTE="bevosu, post: 191573, member: 46"] Also..with Chrome. Started today This page has insecure content On Chrome...if you click on the wrench (upper right) Tools...Java Console..it'll show web developers the insecure script. This is the additional info Chrome gives about the problem... [LEFT][COLOR=#222222][SIZE=5][FONT=Arial][B][SIZE=20px][FONT=Arial]Block Insecure Javascript[/FONT][/SIZE][/B][/FONT][/SIZE][/COLOR][/LEFT] [SIZE=13px][FONT=Arial][COLOR=#222222]When a website is secured via HTTPS, the website developers must also ensure that all of the scripts used by the page will be delivered in the same secure manner as the main page itself. The same requirements also apply to plugins and external CSS stylesheets used by the page, as these have the same considerations as Javascript.[/COLOR][/FONT][/SIZE] [COLOR=#222222][SIZE=13px][FONT=Arial]When this isn't the case (sometimes called a “mixed script” situation), visitors to the site run the risk that attackers can interfere with the website and change the script so as to serve their own purposes.[/FONT][/SIZE][/COLOR] [COLOR=#222222][SIZE=13px][FONT=Arial]Traditionally, browsers have run the mixed script, genuine or not, and notified you after-the-fact by a broken lock icon, a dialog box, or a red https:// in the address bar (in the case of Google Chrome). The problem with this approach is that by the time the script has run, it is already too late, because the script has had access to all of the data on the page.[/FONT][/SIZE][/COLOR] [COLOR=#222222][SIZE=13px][FONT=Arial]Chrome protects you by refusing to run any script on a secure page unless it is also being delivered over HTTPS. Data on the page remains secure even in the presence of an attacker, but the downside is that this may cause pages to display improperly. You may wish to let the website owner know that their site isn't properly secured. A poorly-written extension can also sometimes cause this.[/FONT][/SIZE][/COLOR] [COLOR=#222222][SIZE=13px][FONT=Arial]You can bypass this protection by clicking “Allow Anyway”, in which case Chrome will refresh the page and load the insecure content. You will then see an https:// displayed in red in the location bar indicating that the page could not be secured.[/FONT][/SIZE][/COLOR] [SIZE=2][FONT=Arial][COLOR=#222222] [/COLOR][/FONT][/SIZE] [/QUOTE]

Verification: What is a Syracuse fan's favorite color?