PDA

Click to See Complete Forum and Search --> : Javascript, frames and https://

qri
April 22nd, 2003, 12:59 PM
Hi!
I know that due to security aspects javascript can't modify documents in different frames if the URL is different or the protocol isn't the same. But are http and https different protocols as regards javascript? Is it possible to read variable values from a http framsetting document to a https document in a child frame?

Thanks in advance
Qri
noonxnoon
April 24th, 2003, 02:46 PM
hiya,

I am kinda in the same boat you are.

I have read there are ways to get the data from another frame where the page is on a different server if the one page is secure and has certification...but I have yet to find what you need to do.

are you two pages on the same server? I would think you could pass info with no problem if both documents are on the same server...
qri
April 25th, 2003, 03:30 AM
Yes they are on the same server but as mentioned earlier the frameset containing the variables is not a secure page, but the one wich is going to read the variable values is. The question is: Are http and https considered as different protocols?

Qri
tridom
April 25th, 2003, 01:23 PM
Originally posted by qri

Is it possible to read variable values from a http framsetting document to a https document in a child frame?



I know that without frames the answer to your question is "yes it can be done." You can send variables from a parent to a child window. HTTPS is just encryted and will pick up the value just as if the page were HTTP.

Now.....how frames affect that I couldn't tell you as I haven't had a lot of occasion to use them, but I'd imagine it would be the same.
noonxnoon
April 28th, 2003, 01:17 PM
well, I did a simple frame page with one local web page, and another that points to an https page.

it did load up ok.

problem I see is the 'zone' is 'mixed'

it blocked the 'secured' cookies, and the https was unable to be that 128 SSL lock.

so depending on what the https page does...I think if it need the secure encryption and your local page can't match it...then I think it will fail as my example has done.

I think there is a way if the pages have certificates, but I have not seen a method or what you have to do to do it.