I have a frameset that works fine using http. I then added a secure page (https) in one frame. The title displayed by my browser is "Untitled'. I have a title tag in all the pages but for some reason it does not see any of them when the secure page is displayed in one of the frames. Did I violate some rule doing this, causing the title to break? TIA.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Westi on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
mixing http and https in a frameset
- Thread starter awingnut
- Start date
Try making the frameset page be https also.
Clive
Clive
- Thread starter
- #3
Wouldn't being able to load non secure pages in a secure frameset be a big security hole?
Surely it would be possible to scam someone into thinking a connection was secure when it wasn't. Or it would be possible to load the non secure page outside the secure frameset.
For that reason I'd say that it may be that frameset behaviour will not allow you to include non secure pages within a secure frameset.
This is supposition, might I add.
Foamcow Heavy Industries - Web design and ranting
Target Marketing Communications - Advertising, Direct Marketing and Public Relations
I wonder what possesses people to make those animated gifs. Do you just get up in the morning and think, "You know what web design r
Surely it would be possible to scam someone into thinking a connection was secure when it wasn't. Or it would be possible to load the non secure page outside the secure frameset.
For that reason I'd say that it may be that frameset behaviour will not allow you to include non secure pages within a secure frameset.
This is supposition, might I add.
Foamcow Heavy Industries - Web design and ranting
Target Marketing Communications - Advertising, Direct Marketing and Public Relations
I wonder what possesses people to make those animated gifs. Do you just get up in the morning and think, "You know what web design r
awingnut,
The behavior you are describing is the way framesets work. Neither the title bar nor the address window will change when you load a new frame. The title comes from the frameset page. For this reason it seems logical that the frameset page would have to be https.
As foamcow points out there could be security issues to consider. Unfortunately, security measures may differ by browser. Just making all frames and the frameset page be https would seem to be a logical solution. Otherwise if you only need one secure page make it a link with target="_blank" and it will not be a part of the frameset but will open in a separate window.
Clive
The behavior you are describing is the way framesets work. Neither the title bar nor the address window will change when you load a new frame. The title comes from the frameset page. For this reason it seems logical that the frameset page would have to be https.
As foamcow points out there could be security issues to consider. Unfortunately, security measures may differ by browser. Just making all frames and the frameset page be https would seem to be a logical solution. Otherwise if you only need one secure page make it a link with target="_blank" and it will not be a part of the frameset but will open in a separate window.
Clive
- Thread starter
- #6
Thanks for the replies but I am a little confused. Wouldn't loading the frameset using https necessarily mean the frames are also loaded securely? In any case everything seems to work except the stupid title. The frameset does have a title tag in it. The only difference is when the frame set is loaded http the title works but not when loaded https.
- Thread starter
- #7
- Status
Similar threads
- Locked
- Question
- Locked
- Question