I have just upgraded our test environment from MX 6.1 to
ColdFusion 8. Environment = Windows 2003 R2 SP2, IIS 6.0, MS Access
DB (I know, I'm working on porting to MS SQL).
My site uses SSL, and it appears that anytime I open a page
that uses a JavaScript, I get the 'This page has secure and
nonsecure . . . ' Windows pop-up. I have checked every link in the
code and have found nothing in my CF code that would create this
message. Everything referred to is within the SSL covered
directories.
I compared the production MX 6.1 source code to the version 8
code, and have come up with the following:
version MX 6.1
<OBJECT
CLASSID="clsid:8AD9C840-044E-11D1-B3E9-00805F499D93"
CODEBASE="/CFIDE/classes/cf-j2re-win.cab" . . .
version 8
<object
classid="clsid:8AD9C840-044E-11D1-B3E9-00805F499D93"
codebase="
http://java.sun.com/products/plugin/1.3/jinstall-13-win32.cab#Version=1,3,0,0"
. . .
Version 8 has the codebase hardcoded to the sun website (not
a SSL site). This is throwing my error. I modified the
ne-runtime.xml in the \Coldfusion8\lib file, recycled the services
and voila, no more error.
My question is, was this the right thing to do?