Always test your app in IE8

I had a particularly stark reminder today of why it is still important to do cross-browser testing. While IE8 has now fallen below 25% market share, it still makes up a significant chunk of the traffic that hits our app each day. One simple bug in our code has made using the app in IE8 virtually impossible.

What was that? We were loading a default html5 shim in http instead of https.

<!--[if lt IE 9]> <script src="http://html5shim.googlecode.com/svn/trunk/html5.js" type="text/javascript"></script> <![endif]-->

Every time you loaded our site over SSL you would get this security warning. Every. Single. Time.

A simple 1 character change from 'http' to 'https' on the shim was all that was needed to fix the problem, but it had been lurking there for several weeks unseen because we only were testing on "modern browsers".