Hi! Our application generally uses https.
We also use the HtmlInputCalendar component which uses the <iframe trick to avoid combo-boxes show through. The "iframe" in question will be generated in javascript without the src="" attribute. Now, if the user clicks on the calendar-popup-button we get a security warning in IE 6.0.2800.1106 SP1 telling us the page contains secure and non-secure objects. The only solution I found to avoid this is to add a https url to the iframe. I tested it outside of myfaces and if I add e.g. a https url to a blank.gif it works without this message. Now the progress bar of IE shows some activity the first time the user press such a button, but the more annoying message box disappears. The place in question is in popcalendar.js _hideElement. In case of https we should provide a https url to such a placeholder which will be used as value for the src attribute. Shall I prepare a patch, or is there any developer willing to have a look at it? Thanks! Ciao, Mario
