Mixed Content

Adding 3rd party content to Papyrs Pages

When working on your intranet you may want to add content from a different website or a widget inside a Papyrs page. This is what the IFrame widget can be used for. However, there is a catch. Because all Papyrs pages are delivered over a secure (encrypted) connection the web browser you use takes extra security precautions. One of these precautions is that it won't allow unencrypted content and encrypted content to appear side by side on the same page. So your 3rd party widget with a calendar, some news, or a photo gallery may simply not show up at all!

This is known as a mixed content warning. This is what a Mixed Content Warning looks like in different web browsers:

Warning when using Google Chrome


A small shield icon appears in the upper right corner.

Warning when using Internet Explorer


A yellow bar appears at the bottom of the screen.

Warning when using Firefox


A small shield icon appears at left of the address bar.

Solution

The best solution is to load the https:// version of a widget. If your widget code looks something like this:

<iframe src="http://player.vimeo.com/video/76440793?badge=0&amp; color=c9ff23" width="500" height="213" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>

And replace the http:// part with https://. Like this:

<iframe src="https://player.vimeo.com/video/76440793?badge=0&amp; color=c9ff23" width="500" height="213" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>

In most cases this will get rid of the mixed content warning and will make your widgets show up like before. If this does not work, let us know at [email protected] and we'll see if we can figure out a good solution.

Blocked sites

Finally, some websites block other sites from embedding their pages altogether, even when on a secure connection (by using a so-called X-Frame-Option header). In that case, when the widget is still not showing up — even when using the secure https version — the only option is to contact the support of that particular site, or to embed an alternative site.

Printer friendly docs