Chrome won’t allow IFRAME to load a html file via http while main page using https

i just found a weird thing that the Chrome browser don’t allow an iframe to load a http url when the current url in the addr bar begin with https.for eample,if the current page’s url is:

https://www.abcdomain.com/abc-xyz.html

and it contains an iframe whose src is

http://www.anotherdomain.com/test-xyz.html

then,it worked ok in Firefox browser but  the iframe break in Chrome.
after google for a while,i get some conclusion when calling a page from other domain with diff protocol,:

page – iframe – status
http – http  – allowed
http – https – allowed
https- http  – not allowed
https- https – not allowed

for more related info,please refer to the following url

http://stackoverflow.com/questions/9280665/insecure-content-in-iframe-on-secure-page

http://stackoverflow.com/questions/18223028/google-chrome-wont-allow-iframe-to-load-a-html-file

 

Comments are closed.