Fixed security alert ocurred in https with IE8/9 (bugid:109500)

This fix is refered in the following comment
http://dean.edwards.name/weblog/2006/06/again/?full#comment56361