EducationSoftwareStrategy.com
StrategyCommunity

Knowledge Base

Product

Community

Knowledge Base

TopicsBrowse ArticlesDeveloper Zone

Product

Download SoftwareProduct DocumentationSecurity Hub

Education

Tutorial VideosSolution GalleryEducation courses

Community

GuidelinesGrandmastersEvents
x_social-icon_white.svglinkedin_social-icon_white.svg
Strategy logoCommunity

© Strategy Inc. All Rights Reserved.

LegalTerms of UsePrivacy Policy
  1. Home
  2. Topics

KB47679: "HTTPS security is compromised by http://webserver/MicroStrategy/images/1ptrans.gif" displays in Internet Explorer Developer Tools when running any Document using HTTPS in MicroStrategy Web 9.4.1 and above.


Stefan Zepeda

Salesforce Solutions Architect • Strategy


The error message "SEC7111: HTTPS security is compromised by http://WebServer/MicroStrategy/images/1ptrans.gif" or a similar message may appear in an Internet Explorer browser console when users execute a MicroStrategy dashboard in DHTML mode through HTTPS.

SYMPTOM:
The error message "SEC7111: HTTPS security is compromised by http://WebServer/MicroStrategy/images/1ptrans.gif" or a similar message may appear in an Internet Explorer browser console when users execute a Strategy dashboard in DHTML mode through HTTPS, like shown below:
 

ka04W000001IqrgQAC_0EM44000000263k.png

 


HTTPS security is compromised by http://WebServer/MicroStrategy/images/1ptrans.gif

 
CAUSE:
This is working as designed in Strategy Web. This issue occurs because of the network setup of the environment. Strategy builds an absolute path to the 1ptrans.gif system file. When a client accesses Strategy Web via a proxy over HTTPS, but the scheme between the proxy and the application server where Strategy Web is deployed is HTTP, Strategy Web sees the scheme of the proxy machine instead of the client machine and consequently builds the absolute path to 1ptrans.gif using the HTTP scheme. This causes mixed content (HTTPS and HTTP content) to be displayed to Internet Explorer which logs the error as a security violation.
 
ACTION:
To prevent the security violation, use the parameter configServletPath in Strategy.xml which can be modified to build the desired servlet path like shown below:
 

<parameter name="configServletPath" value="https://webserver/MicroStrategy/asp"/>

This works for both ASP and JSP environment. For detailed information regarding this parameter, refer to tech note KB41644: How to customize the share URL displayed in 'show link' feature in MicroStrategy Web 9.x
 


Comment

0 comments

Details

Knowledge Article

Published:

April 12, 2017

Last Updated:

April 12, 2017