andykrynn
andykrynn

Reputation: 78

Facebook like button triggering security warning on webpages

I have some pages on my site that I put the simple facebook like buttons on as seen in the code below.

<script src="http://connect.facebook.net/en_US/all.js#xfbml=1"></script>
<fb:like href="" layout="button_count" show_faces="false" width="200" action="recommend" font="arial"></fb:like>

Recently, perhaps in the past few days this seems to have started, when visit those pages in IE9, the browser pops up a warning saying "only secure content is displayed" with a button saying show all content. These pages are not secure and there is no reason for them to be, so i am not sure why it is telling me this.

Is there a way i can make the button not trigger this warning? The warning only seems to happen in IE9, the pages load just fine in safari, firefox, and even IE9 in compatibility mode from my testing. Also i have run across other sites that use the same button that show the same behavior, so I am guessing it might be something on facebooks end?

edit: I have tried looking at the site again from my home system on IE9 and it seemed to not complain about security to me. This makes me think it has something to do with my work browsers security levels. The question still remains about why it would bring up any security issues at all, the pages are all http:// pages, no 's'. Perhaps something in facebook's script is doing something secure?

edit2: I found the problem, it was the IE security option for display mixed contents. It was set to prompt, setting it to enabled made the error go away. I dont like that solution, but i have a feeling that the facebook script does some secure stuff at some point and that is what is bothering IE9.

Upvotes: 1

Views: 2275

Answers (4)

Daniel Grezo
Daniel Grezo

Reputation: 1434

the updated link for the bug is https://developers.facebook.com/bugs/174276242655775

Upvotes: 0

Ruslan Abuzant
Ruslan Abuzant

Reputation: 631

There is a reported bug now about this, please vote at http://bugs.developers.facebook.net/show_bug.cgi?id=18627

Upvotes: 0

Brad Christie
Brad Christie

Reputation: 101614

Is it safe to assume your website is running HTTPS? is so, make sure you include the facebook connect script from HTTPS as well. e.g.

<script src="https://connect.facebook.net/en_US/all.js#xfbml=1"></script>

Upvotes: 1

Jimmy Sawczuk
Jimmy Sawczuk

Reputation: 13614

Just change your <script> tag to the https: URL:

<script src="https://connect.facebook.net/en_US/all.js#xfbml=1"></script>

Upvotes: 1

Related Questions