Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I signed up to Farmville and I get a URL like:

https://apps.facebook.com/onthefarm/index.php?ref=tab

At the bottom of the page are ads which are served not using ssl - they are pulling in regular http calls. How are the mixed content warning dialogues suppressed? Is it trickery or due to frames?

share|improve this question

1 Answer 1

Looking at the code my guess would be frames - since facebook killed off fbml tabs all facebook apps run in an iframe so the content of the frame must be ssl but the rest of the page not.

share|improve this answer
    
Interesting. The non-secure ads are loading within the secure Iframe though. So you have secure SSL host page (facebook.com), then the 3rd party iframe (zynga.com.//...) and then within that page you get the non-secure calls. –  Dan Oct 29 '12 at 15:09

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.