Hi,

mojoPortal uses relative urls and protocoless urls internally to avoid such warnings. Most like if you get such warnings it is because of hard coded html for javascript or images in your skin or in your content. These need to be changed to be either relative or protocoless urls.

See the article Solving Browser Security Warnings.

Hope that helps,

Joe

any custom appSettings should go in user.config to reduce maintenance during upgrades because during upgrades you should use the new web.config and transfer any customizations such as machinekey from the old one to the new one.

user.config is never touched during upgrades so there is less to maintain if you keep modifications to <appSettings there. But only <appSettings can go in user.config nothing else from web.config can go there.