Re: Updating Internet Options using a Script

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Joe Sodora (sodora_at_aol.com)
Date: 09/29/04 

Date: Tue, 28 Sep 2004 17:02:02 -0700

Yep. Now you're getting it. And that's our beef with SP2.
The default out-of-the-box settings allow internet html
files with JavaScript to run without a warning, but not
the exact same files if they are stored locally on your
PC. Of course, you could change the settings and not allow
internet files with JavaScript to run, but you have to go
out of your way to make this happen. Local files should be
treated the same way.

As I stated earlier, this is Microsoft's philosophy "In
addition, any files already on your local computer are
assumed to be very safe, so minimal security settings are
assigned to them." Their actions, however, don't jive with
this.

Here is a simple html file with JavaScript:

<html>

<head>
<title>Test JavaScript</title>
</head>

<body>

<p>JavaScript Test</p>
<script LANGUAGE="JavaScript">
<!--
document.write("Last updated :");
document.write(document.lastModified);
// -->
</script>

</body>
</html>

Copy this code into Notepad and store it on your PC as an
html file and run it. If you have not set the two options,
you will get a security warning. But run this same file
online -
http://www.onlinerealtyproducts.com/JavaScriptTest.html
and you will not get a warning.

Joe

>-----Original Message-----
>Joe Sodora wrote:
>> Than why do they allow these exact same files to be run
>> from the internet without giving you an error message?
Are
>> files run from the internet safer than local files on
your
>> computer?
>>
>> Try it yourself. Take simple html file and insert
>> JavaScript. If you ftp that file to a web site, you will
>> be able to run it from the web with the default browser
>> settings.
>
>"...with the default browser settings" is the rub: You
*would* get an error
>message (or prompt) if the Security Zone in which the
file is running (e.g.,
>Internet Zone) were configured to disallow the file or
prompt before running
>it. Try it yourself: Disable (or choose Prompt for) all
scripting in IE
>Tools>Internet Options>Security>Internet>Custom Level and
see what happens
>then.
>--
>~Robear Dyer (PA Bear)
>MS MVP-Windows (IE/OE)
>
>.
>

Relevant Pages

  • Re: VB6 : WebBrowser Control : Disablign JavaScript support
    ... The problem is that I have an existing site that I am reading the HTML ... JavaScript version, but I also see a bunch of noscript portions. ... WebBrowser control does not yield the exact same html source. ... settings to change for each IE setting! ...
    (microsoft.public.vb.general.discussion)
  • Re: Javascript on the client as an alternative to Perl/PHP/Python on the server
    ... HTML page that essentially looks like this: ... requiring a reader to have a computer, ... So at some point an internet connection is required. ... requires CSS, image, JavaScript, Flash, Quicktime support etc. ...
    (comp.lang.javascript)
  • Re: javascript > variable reset help!
    ... and the is being passed to the javascript as requested. ... all done via HTML on the client-side. ... that the browser won't recognize as HTML and will therefore ignore. ... > doesn't reset for new input unless you clear your browser settings. ...
    (alt.html)
  • Re: Using Javascript on my website
    ... I am crewating a website using HTML and Javascript. ... seen by everybody that has internet. ...
    (comp.lang.javascript)
  • Re: Using Javascript on my website
    ... I am crewating a website using HTML and Javascript. ... seen by everybody that has internet. ...
    (comp.lang.javascript)