title: How do I view the insecure items on a secure page
body: <p>I have a web application which works perfectly fine on my own machines, perfectly fine on my customer's PCs but on their customers machines each page they visit they get a prompt for the Mixed Content coming up.</p>
  
  <p>However it doesn't matter whether they answer yes or no to the question, they still get all of the functionality of the site.</p>
  
  <p>We cannot ask them to disable the warning, since they would then consider our application not secure and not use it.</p>
  
  <p>I've installed Httpwatch and none of the resources or urls being loaded are insecure.
  The codebase for any flash objects is called using https:
  I've checked for any removechild() function calls in the scripts and none of them are called on divs with a background image.
  We have no calls to javascript:void anywhere in the codebase.</p>
  
  <p>I'm at a loss as to what to check next.
  Is there any way without being too intrusive, to find out what insecure objects the page is trying to load?
  This has to be something that will work on IE7 or 8 as we are not allowed to install anything on their machines.</p>