For the archives, so that in six months when I forget what happened, I
can find it again.

The "fix" to keep IE from complaining about "nonsecure items" when
requesting non-html over https after a POST, seems to be to send it some
HTML.

If you POST a form over https, and then try to response.sendRedirect()
to a Servlet that sends, for example, a PDF over https, IE will
complain.

But if you instead POST the form, then forward to some HTML that does
nothing but redirect with a <meta> tag, to the exact same Servlet, IE is
happy. Go figure.

--
Wendy Smoak
Application Systems Analyst, Sr.
ASU IA Information Resources Management



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@(protected)
For additional commands, e-mail: tomcat-user-help@(protected)