Skip to main content

Bug Tracker

Side navigation

#11928 closed bug (duplicate)

Opened June 18, 2012 02:11PM UTC

Closed June 23, 2012 01:41PM UTC

Last modified June 29, 2012 09:20PM UTC

IE6/IE7 security warning when using $.get() to add HTML content with inline CSS background img rules

Reported by: tuomas.salo@iki.fi Owned by:
Priority: undecided Milestone: None
Component: unfiled Version: 1.7.2
Keywords: Cc:
Blocked by: Blocking:
Description

When using $.get(...) to add content to an HTTPS page, IE7 gives a false security warning if the content HTML includes an inline CSS rule that loads a background image with a relative url.

Affected browsers: IE6, IE7.

Test case: https://venko.net/testing/ie7-test.html

jQuery versions: at least v1.7.2 and a recent git copy (v1.8.0pre).

What happened: when I clicked the text, IE loaded the image AND displayed the warning ("this page contains both...").

What I expected to happen: Load the image, no security warning.

This bug might not be worth fixing in jQuery (or even possible), but I did notice that the same doesn't happen with $(selector).load(...).

Possible workarounds:

  • use absolute urls
  • use external stylesheets
  • use $(selector).load(...) or another method
Attachments (0)
Change History (3)

Changed June 23, 2012 01:41PM UTC by dmethvin comment:1

resolution: → duplicate
status: newclosed

Changed June 23, 2012 01:41PM UTC by dmethvin comment:2

Duplicate of #11600.

Changed June 29, 2012 09:20PM UTC by tuomas.salo@iki.fi comment:3

I'm not sure whether this is a duplicate of #11600.

This bug is showing on IE6/IE7, while #11600 is reportedly showing on IE7/IE8. (This might also be OS dependent, so might need more testing.)

#11600 is about using $(selector).load(url, selector), while I'm using $.get(...).

If I have time, I'll try to reproduce this bug with $(selector).load(url, selector) and add a link to a test case.