Nate Weiner

When dynamically generating iFrames in IE6 and SSL, their location must be preloaded

I had a script that was creating empty iFrames serving as an Ajax method. But in IE6, I kept receiving a ‘mixed secure and insecure content’ warning. Combing through my source code I couldn’t find what element wasn’t being loaded without https. Well I finally Google’d the problem and found the answer. When I was creating the iFrames, I created them first and then set the src value. I discovered however you need to set the iFrame’s src value upon creation with a secure page. If you need a temporary location to point to before loading without an extra page request, you can enter ‘javascript:false’.

Where I learned about it:
http://crazybob.org/2005/06/ajax-ie-iframe-bug.html