Spiga
TrialPay Referral Bonus: Earn a $250 Amazon gift card
Are you a software developer? Sell your products through TrialPay and you will earn a $250 Amazon.com gift card by completing 50 "Get It Free with TrialPay" transactions in the first 90 days: TrialPay Sign-up

12.10.2008

"This page contains both secure and nonsecure items"

How annoying some Internet Explorer messages could get. I'm sure that you too, dear reader, have seen this security information prompt when browsing if you've used Internet Explorer for a bit. No, I'm not using Internet Explorer but I'm using Maxthon (which has an IE core) and almost everytime I visit a webpage that is secure (starts with https://) I get this prompt:

This page contains both secure and nonsecure items

Do you want to display the nonsecure items?

with the option to click Yes, No, or More Info. An example of such a page is the Google Analytics secure one, so everytime I log in to see statistics I have to click on the damn Yes button to continue. Until now I thought that you cannot disable/remove this annoying prompt, mainly because I was relying on a Microsoft article that said "This behavior is by design. You cannot disable this error message." I know that the KB article in cause is retired, but still an update pointing to a solution would have been excellent.

So I dug around and found that you can disable the "This page contains both secure and nonsecure items" message, with a simple selection. Below you can find how to remove this.

How to remove the "This page contains both secure and nonsecure items" window in Internet Explorer 7, 6 (and probably previous versions):

  1. Open Internet Explorer, go to Tools, Internet Options, click on the Security tab
  2. By default Internet is selected in the Select a zone window, so click on the Custom Level button
  3. A new window will pop-up and you'll have to scroll through those options (probably around the middle of the window) and hunt for an option called "Display mixed content" in the Miscellaneous section
  4. By default Prompt is selected, so change it from Prompt to Enable and click OK
  5. You'll get another "Are you sure there's no sugar" (or something similar ;) ) message that you'll have to click Yes on to, and after that click another time OK. That's it, restart the browser and you shouldn't get that prompt anymore. A small visual guide is in the image below

secure-content-disable

 

How to remove the "This page contains both secure and nonsecure items" window in Maxthon 1 or 2:

  1. This is pretty much the same as in Internet Explorer, so go to Tools->Internet Options (not Maxthon Setup center) the Security tab
  2. By default Internet is selected in the Select a zone window, so click on the Custom Level button
  3. A new window will pop-up and you'll have to scroll through those options (probably around the middle of the window) and hunt for an option called "Display mixed content" in the Miscellaneous section
  4. By default Prompt is selected, so change it from Prompt to Enable and click OK until all the windows are closed

How do you remove this message in Firefox or Opera or Google Chrome? Well, as far as I know these browsers are smart enough to not show this prompt, so you're not having to change anything. If you wonder what the "This page contains both secure and nonsecure items" message actually tells you, it's that in the page you are visiting, at least one element comes from a non-https address. So if someone from Google Analytics forgot to put a small icon on a secure section, then millions of Internet Explorer users will get this prompt. Unless they follow this tutorial.

13 comments:

Anonymous said...

Thank you, thank you, thank you!!! I've been looking through the mmc to find the answer and never thought about looking into IE's security settings. Since it was my email provider that had the error message everytime I opened IE, it became extremely frustrating. Thank you for this fix!!!

Anonymous said...

Fantastic!! This has been bugging me for ages 5 star tip!!

GoodLe said...

Glad it helped, indeed is an annoying warning that I'm happy it doesn't show anymore. I wonder if Vista shows this ... not that I worry since I'll switch directly to Windows 7

Anonymous said...

My version is MIE 7 and it does not offer the display mixed content box. Any other ideas?

eriK said...

thx much, this has been driving me nuts all morning

Chris said...

Nice, thanks!

Anonymous said...

Is it secure to disable this option like this? What are the possible security risks?

jmf said...

same here so happy to found the settings. So annoying

Anonymous said...

i enable "display mixed content" and i still get the annoying pop up. i have to click it 3 times before it goes away. i get this prompt before every page load for only 1 particular https site. I have added the site to my trusted sites and that has not solved the problem either. Help!

Anonymous said...

Well, the solution works if you don't mind your gmail content (for example) sending 'some' information via an unsecured protocol. Personally I'd rather harass Google to fix whatever portion of the page is still being loaded with a http:// prefix, instead of https://.

Anonymous said...

Thanks.......works Great!

anu said...

Thanks for this information. This is very nice article. I got new information, you can chk ur internet broad band speed as free from ip details.

Anonymous said...

does anyone know how to fix this vis a regisrty hack?

Post a Comment