<html>
<head><title>Page with unsafe contents</title>
<script>
var foo = null;
function IsFooSet() {
return foo != null;
}
function ImageWidth() {
return document.getElementById("bad_image").width;
}
</script>
<script src="https://REPLACE_WITH_HOST_AND_PORT/ssl/set_foo.js"></script>
</head>
<body>
This page contains an image which is served over an insecure HTTPS connection...<br>
<img id="bad_image" src="https://REPLACE_WITH_HOST_AND_PORT/ssl/google_files/logo.gif"/>
<br><br>
And an IFrame served over insecure HTTPS...<br>
<iframe id="bad_iframe" src="https://REPLACE_WITH_HOST_AND_PORT/ssl/bad_iframe.html?open_popup=1"/>
<br><br>
And even worse, some JavaScript served over insecure HTTPS...<br>
</body>
</html>