FB API making insecure xd_arbiter.php requests in a secure page

Question

I'm having trouble with a secure Facebook app page which the browser reports as containing insecure content.

The insecure content seems to be one request to: http://static.ak.facebook.com/connect/xd_arbiter.php

All subsequent calls from the FB API are going over https, though.

I can't figure out what the problem is, since I'm loading all of my content securely, including the FB script: https://connect.facebook.net/en_US/all.js

Any ideas?

Update: Seems like it's Facebook's own mistake, and a fix is on the way: http://developers.facebook.com/bugs/303558613049120?browse=search_4f874a5f45e924383360019

Answer 1

It's a Facebook problem. Fix should be coming soon and there's nothing you can do in the meantime.

https://developers.facebook.com/bugs/303558613049120?browse=search_4f877beec69e35d32059456