ndp

The theme idea helped me to narrow it down significantly.

(on my test site): I chopped out blocks of php code from template pages, until I found the two lines in template/start.php:

<!– script START –>
<script type=”text/javascript” src=”<?php bloginfo(‘template_url’); ?>/js/base.js”></script>
<script type=”text/javascript” src=”<?php bloginfo(‘template_url’); ?>/js/menu.js”></script>
<!– script END –>

Functionality was broken, when I removed these lines, but I stopped getting the security popup.

I replaced those lines, then I dug into these two .js files. I had already suspected the menu.js file, based on the removeChild() call, from the Microsoft KB Article.

What I found, at the bottom of the file, was this decision:

if (document.addEventListener) {
document.addEventListener(“DOMContentLoaded”, loadMenus, false);

} else if (/MSIE/i.test(navigator.userAgent)) {
document.write(‘<script id=”__ie_onload_for_generic23″ defer src=”javascript:void(0)”></script>’);
var script = document.getElementById(‘__ie_onload_for_generic23’);
script.onreadystatechange = function() {
if (this.readyState == ‘complete’) {
loadMenus();
}
}

} else if (/WebKit/i.test(navigator.userAgent)) {
var _timer = setInterval( function() {
if (/loaded|complete/.test(document.readyState)) {
clearInterval(_timer);
loadMenus();
}
}, 10);

} else {
window.onload = function(e) {
loadMenus();
}
}

When I removed the test for the MSIE user agent, that whole “else if” block, everything seemed to work fine, and there was no IE security popup. Can anyone explain what this code is doing?

https://edtechfuture.org.

When I use tools like PageInfo in Firefox, or Safari’s Activity window, they list every element of the page, and they’re all coming from https.

My theme is a slightly modified version of Generic Plus; fwiw.

Following the microsoft kb article, above, there’s a section of javascript in my mytheme/js/menu.js file:

cleanWhitespace = function(list) {
var node = list.firstChild;
while (node) {
var nextNode = node.nextSibling;
if(node.nodeType == 3 && !/\S/.test(node.nodeValue)) {
list.removeChild(node);
}
node = nextNode;
}
return list;
}

I think it’s responsible for clearing the popup menu graphics, when the user mouseovers the menu bar. I tried just remarking-out the “list.removeChild(node);” line, knowing that it would break some other functionality – and sure enough, the menubar mouseovers stopped working. And I was still getting the security popup in IE. So I know that this is not the cause of the issue either.

(put the code back safe-and-sound, and the feature’s working again).