| <html> |
| <head><title>Page with unsafe contents</title> |
| <script> |
| var foo = null; |
| |
| function IsFooSet() { |
| return foo != null; |
| } |
| |
| function ImageWidth() { |
| return document.getElementById("bad_image").width; |
| } |
| </script> |
| <script src="https://REPLACE_WITH_HOST_AND_PORT/ssl/set_foo.js"></script> |
| </head> |
| |
| <body> |
| This page contains an image which is served over an insecure HTTPS connection...<br> |
| <img id="bad_image" src="https://REPLACE_WITH_HOST_AND_PORT/ssl/google_files/logo.gif"/> |
| |
| <br><br> |
| And an IFrame served over insecure HTTPS...<br> |
| <iframe id="bad_iframe" src="https://REPLACE_WITH_HOST_AND_PORT/ssl/bad_iframe.html?open_popup=1"/> |
| |
| <br><br> |
| And even worse, some JavaScript served over insecure HTTPS...<br> |
| |
| |
| </body> |
| </html> |
