Tracking Down Unsecure Items On A Web Page

[Sylvan012]

Hey there, one and all,

I thought I'd check in to see if anyone has a good solution for my favorite bug-a-boo.

The company I work for secures all of our Web pages for all of our clients. Sometimes, however, an update will be made that triggers the whole "One or more elements on your page are unsecure" alert. At times, between searching all associated CSS files for unsecured images, javascripts calling javascripts, and just-plain-bad-code, I can lose my cool trying to find the proverbial "needle in a haystack".

Has anyone run into any tools that will list which elements are unsecure on a given page? Heck, a useful Firefox Add-On would be great, but -so far- I can't find one.

Suggestions?

Yours,
Sylvan (Dave)

[Sylvan012]

SOLVED!

Ok, I'll share my solution.

On FireFox there is an Add-On called "HttpFox" that has quite an array of tools to help with just this sort of problem...

Thanks anyway, folks!

Try this tool!

Yours,
Sylvan

[tracknut]

Would you mind explaining to me what you mean by "...secures all of our Web pages for our clients"? What technically does that mean?

I'm just curious, obviously you've solved your problem :)

Thanks
Dave

[Sylvan012]

Sure...

I work for an eCommerce company; we secure all the pages we host that carry sensitive information. Occasionally, however, there will be an image, .js call, or something else which will reside on a non-secure server and -thereby- unsecure the whole page.

It's really quite annoying... ;)

Does that explain it?

Yours,
Sylvan (Dave)

[tracknut]

So when you say they're on a secure server, you mean that you're using SSL or https, and then periodically you find an image or file which is using http instead, or on a server which doesn't use SSL?

Thanks
Dave

[Sylvan012]

Exactly.

[tracknut]

Gotcha, thanks!