What security issues can I possibly run into by having 3rd party RSS feeds on a secure page
I have a page over https. This has an iframe on 开发者_如何学Cit, and the domain of the iframe is the same as top.
This iframe uses google feed reader (gfdynamicfeedcontrol) to read rss feeds from 3rd party sites.
What security issues can I run into with this setup, and is there a better way to do this? Thanks
As long as it's static content such as just images or a calculation script it's probably fine. The problem is that someone may load content which really should have been secured via SSL. This means that the browser freaks out when it notices pages which have both secure and unsecure content on them and will warn users. This can scare users away from your site potentially.
You're going to have browser warnings everywhere if you go with this setup.
精彩评论