Question

I have a JavaScript link that is as follows:

<a href="#" onclick="window.open('TrackPackage.asp?track=235&ship=OTHER&ShippingMethod=1', '', 'location=1,menubar=1,scrollbars=1,status=1,resizable=1,width=635,height=460'); return false;">
<span class="PageText_L288n">TRACK YOUR PACKAGE</span>
</a>

However, it is being linked from a secure page, so it becomes a secure page. Unfortunately this creates a problem for me since a unsecured form is automatically submitted when they arrive at the page. They get prompted: this form is being submitted insecurely. There isn’t any sensitive data on those pages so I really don’t need the page to be secured in the first place. Is there an attribute, either in HTML or JavaScript that could make a link not secure. I cannot really modify the link itself because it’s a dynamic link.

However, I do believe some jQuery can add http://www.example.com/ before the TrackPackage.asp. I guess that would be acceptable, but I’d prefer some kind of attribute that will just make the link non secure. Thanks

Answer 1

You might try to override native function. But in some browsers that may not work (did not find such browser, so assume that it works in all, at least major, browsers 🙂 ):

var windowOpen = window.open;
window.open = function(url, name, settings) {
    var url = 'http://www.example.com/' + url;
    alert("New url = " + url);
    windowOpen(url, name, settings);  
}

If you want to do it for a selected class of the links then you can do it like this (the idea of the onclick attribute modification as a text string is not the best one)

<script>
var windowOpen = window.open, clicked = false;
window.open = function(url, name, settings) {
    if (clicked) var url = 'http://www.example.com/' + url;
    alert("New url = " + url);
    windowOpen(url, name, settings);  
}
$(document).ready(function(){
   $('span.packagetracklink').click(function(){
        clicked = true;
        setTimeout(function(){clicked = false;}, 200);  
   });
});
</script>
<a href="#" onclick="window.open('some_url', '', ''); return false;">
<span class="packagetracklink">TRACK YOUR PACKAGE</span>
</a><br>
<a href="#" onclick="window.open('some_url', '', ''); return false;">
<span class="another_class">TRACK YOUR PACKAGE</span>
</a>