Mixed content warning

I have a browser helper object that modifies the page after the page gets
loaded. This includes adding images from local disk. This works fine for http
sites but brings the "mixed content" warning for https sites. I have tried
the following approach to suppress it:

- Use IWebBrowser2->put_Silent(VARIANT_TRUE): This works just fine but
leaves a big security hole.

Is there a way to implement, may be, IInternetSecurityManager and respond to
ProcessUrlAction for my custom images? I tried implementing it as follows:

class CCustomSecurityManager :
public IOleClientSite,
public IServiceProvider,
public IInternetSecurityManager
{
// IUnknown
// IOleClientSite
// IServiceProvider
// IInternetSecurityManager
}

In BeforeNavigate2, I query IOleObject from IHtmlDocument2 from
IWebBrowser2. The call to IOleObject ->SetClientSite always returns
E_INVALIDARG.

What am I missing here? Can anyone help?

Also, should I consider, as an alternative, adding local disk path to
trusted list using default security manager and not worry about writing a
custom security manager?

Thanks,

.

Relevant Pages
Loading