通过iFrame登录不适用于IE9吗? [英] Logging in via iFrame doesn't work with IE9?
问题描述
我有一个网站 http://abc.com/support ，该网站使用的iFrame指向 https://123.sample.com 的源 我的目标是屏蔽域，然后iFrame成功完成此任务.但是，我发现用户无法使用IE 9登录该网站(来源: https://123.sample .com ).没有任何错误，只是页面刷新，它们仍然在登录屏幕上.但是，如果直接在IE9中访问 https://123.sample.com ，则登录将不会成为问题.
I've got a site http://abc.com/support, which uses an iFrame that has a source pointing to https://123.sample.com My objective was to mask the domain and the iFrame accomplishes this successfully. However, I just found out that users are not able to log into the site using IE 9(source: https://123.sample.com) when they go through the iFrame. Nothing errors out, it's just that the page refreshes and they'll still be at the login screen. But if they were go directly to https://123.sample.com in IE9, then logging in wouldn't be an issue.
我认为强制使用<meta http-equiv="X-UA-Compatible" content="IE=7" />可以强制使用IE 7的标准，但事实并非如此.奇怪的是，如果我在iFrame中输入了错误的密码，我实际上会收到一条错误消息，指出无效的密码".但是，如果我使用正确的凭据登录，则不会发生任何事情.您会看到页面刷新，但将停留在登录页面上.
I thought forcing it to use IE 7's standards would work by using <meta http-equiv="X-UA-Compatible" content="IE=7" />, but it doesn't. Oddly enough, if I enter an incorrect password in the iFrame, I actually get an error stating "invalid password". But if I log in with the right credentials, nothing happens. You'll see the page refresh, but you'll be stuck at the login page.
建议?这是第二个问题.请注意，iFrame中的来源是安全页面，但我的页面不是.有什么要保护我的页面的安全吗?
Suggestions? Here's a second question. Note that the source in the iFrame is a secure page, but my page isn't. Is there any point to securing my page?
推荐答案
您不应放置https:// iframe来登录通过纯HTTP服务的页面.对此问题的原因已在许多问题中进行了讨论，例如:
You shouldn't put a https:// iframe to log in within a page served over plain HTTP. The reasons for this have been discussed in a number of questions, for example:
- 是否可以安全弹出窗口登录?
- 从HTTP发布到HTTPS是否是一种不好的做法?(在Security.SE上)
- Secure popup login possible?
- Is posting from HTTP to HTTPS a bad practice? (on Security.SE)
这篇关于通过iFrame登录不适用于IE9吗?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
