Hi all,

We have an a HTTPS site that brings up a page from a different site of ours that’s HTTP.

In IE (9), we get the message at the bottom of the page”
“Only secure content is displayed. What’s the risk? [Show all content]”.

When the button is clicked, it closes the lightbox-ish control that's open and returns to the page it was overlaid on.

Does anyone know how to avoid this in IE?

In the HTTP site’s page, one guy here had the idea to add, at the end of On_Load, the following to turn off cross-site scripting protection:
this.Response.Headers.Add("X-XSS-Protection", "0");

Both sites are C# / ASP.NET 4.0.

Thanks in advance...