topic Re: Display Mixed Content in ArcGIS for SharePoint Questions

Display Mixed Content

DavidLozzi — Sat, 16 Apr 2011 03:01:05 GMT

Hello,

I'm getting an error 'Display Mixed Content' when viewing my ArcGIS Map web part over an SSL connection. All basemaps are set to https, am I missing something?

Re: Display Mixed Content

LouFarho — Mon, 25 Apr 2011 13:21:32 GMT

Is the layer you are adding also https? I get it when I point to a non SSL site when my host is SSL.

Re: Display Mixed Content

DavidLozzi — Mon, 25 Apr 2011 13:25:40 GMT

Thanks for the reply. As of right now, all I'm pulling is the base map, I havent added a layer yet.

Re: Display Mixed Content

RickThiel — Mon, 25 Apr 2011 19:44:43 GMT

Hi Dave,

We experienced the same problem for a long time here. It turns out that the solution is very simple. In your Default.aspx page Microsoft puts an image link into the page just in case the user's client machine does not have Silverlight installed. The user will see an image that says "Get Silverlight now"

The problem is that the image link looks like this:
<img src="http://go.microsoft.com/fwlink/?LinkId=161376" alt="Get Microsoft Silverlight" style="border-style:none"/>

Which is a non-ssl link. Thus you have an un-secure image trying to load on a secure page, and you will see the display mixed content message in Internet Explorer.

To fix the problem simple change the image link to https:
<img src="https://go.microsoft.com/fwlink/?LinkId=161376" alt="Get Microsoft Silverlight" style="border-style:none"/>

Hope that helps. --Rick

Re: Display Mixed Content

DavidLozzi — Tue, 26 Apr 2011 14:44:28 GMT

Hi Rick,

Spot on, thanks for the pointer, HOWEVER, how do I modify this file? I think it's part of the ArcGIS webpart...

Re: Display Mixed Content

RickThiel — Fri, 06 May 2011 18:34:30 GMT

Hi Dave,

Sorry for the late reply. My subscription to this thread does not appear to be working for me. I just realized that I was talking about product ESRI SilverLight, not the Sharepoint webpart. I really apologize for the confusion.

But, my point is probably still valid. To troubleshoot the problem I would suggest using a tool like Fiddler or Google Chrome developer tools. These tools will allow you to see all the network activity for every post. In the logs you will probably see SharePoint trying to GET an image from an HTTP url, instead of HTTPS. If you can fix that url so that it is HTTPS, I believe your problem will be fixed.

-_Rick

Re: Display Mixed Content

DavidLozzi — Tue, 31 May 2011 17:16:54 GMT

Anyone else have this issue?

Re: Display Mixed Content

LouFarho — Mon, 06 Jun 2011 14:02:52 GMT

We have SSL turned on and we have modified all the links in the lists to point to https. We have also modified the DefaultConfiguration.xml in the ArcGIS Mapping Configuration Files library.

We are still getting the mix mode message. From Fiddler, I see a request going to
www.arcgis.com/sharing/community/groups?q=title:"ArcGIS%20Online%20Basemaps"%20AND%20owner:esri&sortField=title&f=json&num=12&tickCount=4578613

and

www.arcgis.com/sharing/search?q=type:"Web%20Map"%20-type:"Web%20Mapping%20Application"%20AND%20group:702026e41f6641fb85da88efe79dc166&sortField=name&f=json&num=12&tickCount=4581562

the trace also states that the link was referred by www.mycompany.com/_layouts/ESRI.ArcGIS.Mapping.SharePoint/xap/ESRI.ArcGIS.Mapping.Sharepoint.Client.MapWebPart.xap

Appears to be coming from the Silverlight application.

Does ESRI have a recommended fix for this?

Re: Display Mixed Content

WillAlvis — Thu, 27 Oct 2011 14:33:43 GMT

lfarho99, I am seeing the same thing. Did you ever find a solution?

Re: Display Mixed Content

RickThiel — Thu, 27 Oct 2011 14:49:39 GMT

lfarho99, I am seeing the same thing. Did you ever find a solution?

Hi Will,

the only way I have found to get the message to disappear is to change the Internet Explorer options (see attached screen shots). Go to the Security tab and select the Local Intranet zone and click the "Custom Level..." button. Find the "Display Mixed Content" section and change it from "Prompt" to "Enable."

However, this is an unacceptable option if your security policies won't allow it. or if you have a large group of end users and it would be nearly impossible to tell everyone to make these changes for their own browsers.

Re: Display Mixed Content

BradyDoll — Mon, 28 Nov 2011 19:37:38 GMT

I have just run across this issue myself and wanted to share some more insight. It appears that the link https://go.microsoft.com/fwlink/?LinkId=161376 redirects to http://download.microsoft.com/download/5/1/6/5165823D-1D79-4871-8AC2-42DDDB94A5C2/PNGs/SLMedallion_ENU.png, which is why you still see the error after changing every link to https.

It seems that you could host the image yourself (if Microsoft allows it) to prevent the warning.

I also wanted to point out that instead of hard coding http:// or https://, it is possible to just use // and it will automatically select http or https depending on the original URL (see: http://blog.httpwatch.com/2010/02/10/using-protocol-relative-urls-to-switch-between-http-and-https/).

Re: Display Mixed Content

RickThiel — Mon, 28 Nov 2011 19:59:49 GMT

Thank you. I did not know that you could do that.

Re: Display Mixed Content

EricKant — Sat, 28 Jan 2012 19:25:49 GMT

Where can this link be adjusted in the webpart ?

Re: Display Mixed Content

BrianEgnitz — Wed, 15 Feb 2012 17:29:32 GMT

This can be resolved by first configuring all connections to be https and then changin the ArcGISOnline.xml file found in the ArcGIS configuration folder to https. I also changed some of the other map defaults, but this seamed to do the trick

<?xml version="1.0" encoding="utf-8" ?>
<Configuration>
<Sharing>https://www.arcgis.com/sharing/</Sharing>
<Secure>https://www.arcgis.com/sharing/</Secure>
<ProxyServer></ProxyServer>
<ProxyServerEncoded></ProxyServerEncoded>
</Configuration>

2.1.1 esri Webpart for SP2010

Re: Display Mixed Content

EricKant — Mon, 05 Mar 2012 21:29:27 GMT

Thanks, Ill try this tomorrow ...