How to avoid security note popup?

Question

Hi,
I have two BSP Applications, which I start from SRM Enterprise Buyer via new window. I have created an internet service user, which I put in the ICF service of the application.
Here goes the question.
In one of my BSPs the new window appears like expected. In the otherone I get a popup message (I must translate this from German to English, but I hope you get the contents):
The popup says:
<i>Title: Security note
You are about to turn to an insecure connection. data which has been sent to the prior site, will possibly be sent to the insecure site. Do you wish to continue?</i>
Why is that? Both ICF entries use the same user and look the same - under security there is a radio at standard in both cases.
The URL of the BSP without Popup looks like this:
http://<host>:8028/sap/bc/bsp/sap/z_imp_all1/start.htm
the one with popup like this:
http://<host>:8028/sap(bD1kZSZjPTMwMQ==)/bc/bsp/sap/z_scan_pzn1/start.htm?sicht=pzn&username=MEYERM&HOOK_URL=https%3A%2F%2Fukmsapweb%2E<host>%2Ede%3A9211%2Fscripts%2Fwgate%2Fbbppu99354e5a01%2F%3F%7EOkCode%3DADDI%26%7Etarget%3D%5Ftop%26%7ECALLER%3DCTLG&OCI_VERSION=3%2E0&http_content_charset=iso%2D8859%2D1&returntarget=%5Ftop
Any ideas, how to avoid the popup, welcome.
regards, Matthias
Message was edited by: Matthias Kasig

Answer 1

Hi Renald and Rainer,
to Renald: Yes, I have also checked Internet options -- advanced, and unchecked the warning, when switching from save to unsave mode. I also unchecked the warning, if formular data is being redirected. Still this takes no effect. And anyway, I can't see the point, because from the same https page I've got two links which link to http-BSPs. One brings about the unwanted popup - the otherone, with apparently same settings does the security popup. The link itself is launched via JavaScript, like this:
<a href="JavaScript:launchCTLG('PZN_Scan');" class="catalog" alt="PZN" title="PZN">PZN</a>
to Rainer: I checked the note you gave. It contained a chm file. It also refers to the situation, that you get the popup message, when leaving https and turning to http. It also provides a solution like this:
<iframe id="myIframe" src="JavaScript:void(0);"></iframe>
In fact I can't change/modify the call of the URL - and it is already being called via JavaScript. The EBP page is SRM generated.
I shall try to copy the BSP application, that works fine without popup, and then put in the code of the popup-version... and see what happens next.
Thanks so far. I shall give feedback, when I have finished.
Matthias