How to avoid security note popup?

[matthias_kasig2]

Hi,

you might want to have a look at this thread in the BSP forum. I have started a thread there, because I am facing a weird behaviour of two BSPs.

I could not fix the problem yet, maybe some EBP expert might help.

But I shall give a short description of my problem here, too.

In SPRO I have customized two catalogs (which contain the URL to the BSPs and which generate the links to the according BSPs), the links for them appear, when the EBP User clicks on buying.

I am leaving from https to plain http.

In one case I get the normal URL of the BSP which is:

http://<hostaddress>.de:8028/sap/bc/bsp/sap/z_imp_all1/start.htm

and which starts without a warning popup.

the other URL gets transformed and gets a Query String connected to it (with the HOOK_URL eg, and User eg)

and looks like this:

http://ukmsrv018.ukmuenster.de:8028/sap(bD1kZSZjPTMwMQ==)/bc/bsp/sap/z_scan_pzn1/start.htm?HOOK_URL=...

also in the latter case, I get a popup hint, which I want to get rid of. The popup says:

<i>Title: Security note

You are about to turn to an insecure connection. data which has been sent to the prior site, will possibly be sent to the insecure site. Do you wish to continue?</i>

Now, how can I get rid of this popup?

If you take a glance at the other thread in BSP Forum, you

will know, that I have tried to change the internetoptions in IE under security, to avoid the popup - but so far, without effect. And I don't think this is the correct approach - as I use the same IE for both applications, starting on the same basic https-EBP webpage. One delivers the BSP without Popup, the other one with popup.

What else can I do? help appreciated.

Regards, Matthias

[Former Member]

Hi Matthias,

maybe you have 2 different behavior between those 2 URLs because they are not in the same domain.

Did you try to change IE security settings on Cross Domain settings ?

Rgds

Christophe

[matthias_kasig2]

Hi Christophe,

sorry, I should have been more careful. Both URLs are in the same domain. The first one is also in http://ukmsrv018.ukmuenster.de:8028/

I have checked IE settings (internet options-- advanced -- security) and disabled warning, when turning from save to unsave and disabled warning, when formulardata is being redirected. Still, I think both links should behave the same. Both target BSPs are in the same domain, have same properties (both stateless) and use same service user in SICF.

Matthias

ps: I have also read please read note 616900 under the topic: "Security Information:This page contains both secure and nonsecure items". This note refers to the fact, that http is called from https. It states, you can avoid the popup when calling the URL via Javascript-Protocol.

My URL is called via Javascript like this:

<a href="JavaScript:launchCTLG('PZN_Scan');" class="catalog" alt="PZN" title="PZN">PZN</a>

[matthias_kasig2]

Dear SDN guys,

finally it WORKS!!! I have deleted all the SPRO entries for the catalog URL and created this stuff new. I plugged in the old catalog BSP again! Something must have been wrong before. Now I am popup free...

thanx for the input,

regards, matthias