Mobile app version of vmapp.org
Login or Join
Annie201

: Google custom search using some HTTP resources when called from HTTPS we are using the google search appliance in our web app. It is used by several other parts of our organization but we

@Annie201

Posted in: #Google #GoogleApps

we are using the google search appliance in our web app. It is used by several other parts of our organization but we are using it on a web app that uses https. So, we followed google's instructions to get all the google code via https so that users don't get the annoying "This page contains both secure and insecure items" popup. Most of the google code has behaved and come to us as https, but there is a part of it pulling from www.google.com/cse
full URL =
www.google.com/cse?q=searchTerma&cx=001025153263958516519%3Aj2323tveixc&cof=FORID%3A11%3BNB%3A1&ie...

that causes the insecure items warning to popup.
This popup occurs in the results page and the above URL is the only non-secure request I can find.

Update. It turns out we didn't follow a specific Google doc to make this happen, but instead a series of forum posts. Most recently we are trying to follow this one: www.google.com/support/forum/p/webelements/thread?tid=64ebdf5fd3839c2d&hl=en
Reviewing these, I think that serving our entire site through https and using Google's custom search with javascript is not possible at this time.
and since we have paid for a custom search from google, there should be a way to change to non-javascript version. Is this correct?

10.01% popularity Vote Up Vote Down


Login to follow query

More posts by @Annie201

1 Comments

Sorted by latest first Latest Oldest Best

 

@Heady270

Since this question was asked, Google has started to support JavaScript custom search for HTTPS sites. From developers.google.com/custom-search/docs/js/cselement-devguide (emphasis added):


This example specifies that the JavaScript code for the custom search element can be found at www.google.com/jsapi. If you specify a different local Google host (for example, <script src="http://www.google.co.uk/jsapi" type="text/javascript">), that host will also be used in Google search. To avoid mixed content security warnings, you can also specify instead of if necessary.

10% popularity Vote Up Vote Down


Back to top | Use Dark Theme