Level 3

Embedding "http" URL in "https" site

Forum|Forum|9 years ago
November 17, 2016
2 replies
13203 views

We have a requirement to embed a URL of a third party site in an Iframe, into our AEM site. The third party URL uses "HTTP" scheme.

Since our site uses “HTTPS” scheme , when the page is loaded, it is prompting for “Load Unsafe script” and the iFrame is rendered only if we accept it.

(We have tried to provide some sample url with “https“ scheme within iFrame, but in that case content is not getting displayed due to “X-FRAME OPTION” header set to “Same Origin” in our site.)

Is there any way to load the content directly in the page without prompting for “load unsafe script” ? Please advise.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

kautuk_sahni

Community Manager

Hi

I am not sure if it is allowed.

But some workarounds i found out are:

1. Create your own redirect script on an https page you control (a simple javascript redirect on a relative linked page should do the trick. Something like: (you can use any langauge/method)

https://mysite.com That has a iframe linking to...

https://mysite.com/utilities/redirect.html Which has a simple js redirect script like...

document.location.href ="http://thenonsslsite.com";

2. "https://www.google.com/search?q=%http://yourhttpsite.com&btnI=Im+Feeling+Lucky" [use google as the ssl proxy, tested on Firefox]

3. You could add an RSS feed or write some reader/parser to read the http site and display it within your https site.

I also let other community member to comment here.

~kautuk

Kautuk Sahni