I signed up to Farmville and I get a URL like:


At the bottom of the page are ads which are served not using ssl - they are pulling in regular http calls. How are the mixed content warning dialogues suppressed? Is it trickery or due to frames?


Looking at the code my guess would be frames - since facebook killed off fbml tabs all facebook apps run in an iframe so the content of the frame must be ssl but the rest of the page not.

  • Interesting. The non-secure ads are loading within the secure Iframe though. So you have secure SSL host page (facebook.com), then the 3rd party iframe (zynga.com.//...) and then within that page you get the non-secure calls.
    – Dan
    Oct 29 '12 at 15:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.