title: HTTP and HTTPS iframe
body: <p>I am creating a small widget and I want to allow others to use it. The <code>iframe</code> is loaded via HTTP - but I want to allow users to login via HTTPS. i.e. Send a request for login via SSL.</p>
  
  <p>Is this allowed within the same-origin policy? i.e. The scenario is that a user can integrate my JavaScript to their website, the widget opens and I want to allow them to login via HTTPS?</p>