Active controls and SP2 security

W

Warren Carter

I have my index page set up with layers tell what is in
the different sections. But when the site is open the
layers are blocked from showing but to security issues in
SP2. Can you help me set up the page so it will allow the
contents of my layers.
 
P

Paul Horvath

Dear Stefan,
I too am having BIG problems with our company website
since the ridiculously high security settings of XPSP2.
I have also visited the link you provided but it does not
tell you how to overcome this problem in your web page
code. An even bigger problem is that ANY bahivour you put
into an even basic HTML webpage is now rejected by
IE6SP2. So, even the Microsoft's OWN code generated by
its own Web Authoring program (FP2003)is rejected by
IE6SP2. Let me clarify rejected. Even a basic Marquee
with NO OTHER items on the page results in the IE6SP2
browser INFORMATION BAR being displayed asking you
to "allow" the "active content" that "could access your
computer".
This is ridiculous. Even a simple "Jump menu" results in
the same Information bar warning. YET, I can visit other
websites, which also have jump menus and they DO NOT GET
BLOCKED. So I need to know what part of the code
IE6SP2 "sees" as potentially unsafe, and how to get
around this. How do I make the broser "see" this
as "safe"??? I would have thought that Microsoft would
have made their OWN WEB AUTHORING software compatible
with the NEW OVER CAUTIOUS browser settings. Of course I
know how to turn this off in the browser, but how's it
going to look if I have to put a message on our website
saying "Please go to INTERNET OPTIONS>ADVANCED TAB> and
tick the box that says "Allow Active content to run in
files on my computer". This really would make our company
aas well as myself look very unprofessional. So I feel
that many of us web authors need to have clear directions
as to HOW we make the code "safe" OR, Microsoft has to
change code that FP2003 produces in a web page in order
for it to be seen as "safe" by IE6SP2.
Can anyone help us???????
Regards,
Paul Horvath,
Melbourne, Australia.
-----Original Message-----
See http://www.microsoft.com/technet/prodtechnol/winxppro/main
tain/sp2brows.mspx




"Warren Carter" <[email protected]> wrote in
message news:[email protected]...
 
R

Ronx

Have you published the web to a different computer and tried viewing from
your computer?

'... the box that says "Allow Active content to run in files on my
computer"' is referring to files that are physically located on "my
computer" - it does not refer to files physically located on a different
computer (AKA the server), so a visitor to your website will not notice any
problems (unless you are using Active X or the like).
 
P

Paul Horvath

Dear Ron,
Well, I hate to admit it, but you are 100% correct.

The pages all view OK when viewed from the web server.
However, there is still one problem, I also use these web pages viewed from
a CDROM, and in that case it is still a problem. Basically I have a page
which has product groups in Jump menus (dropdown menus), and within the jump
menus are links to pdf files which contain product information.
Any ideas on how to overcome that problem ?

Thank you so much for making me aware that the pages will not be blocked
when viewed from the web server. I kept previewing my pages locally having
the information bar constantly showing up.

Your help is much appreciated.
Cheers,
Paul Horvath.
 
R

Ronx

Viewing files locally, or from CD requires each user running WindowsXP SP2
to set up IE individually.
In IE, Tools->Internet Options->Advanced Tab
Scroll down to Security section
Tick the check boxes:
Allow active content from CDs to run on my computer
Allow active content to run in files on my computer

The only alternative to this is to use a different browser and/or operating
system - again, an individual's choice.
--
Ron Symonds (Microsoft MVP - FrontPage)
Reply only to group - emails will be deleted unread.


Paul Horvath said:
Dear Ron,
Well, I hate to admit it, but you are 100% correct.

The pages all view OK when viewed from the web server.
However, there is still one problem, I also use these web pages viewed
from
a CDROM, and in that case it is still a problem. Basically I have a page
which has product groups in Jump menus (dropdown menus), and within the
jump
menus are links to pdf files which contain product information.
Any ideas on how to overcome that problem ?

Thank you so much for making me aware that the pages will not be blocked
when viewed from the web server. I kept previewing my pages locally having
the information bar constantly showing up.

Your help is much appreciated.
Cheers,
Paul Horvath.

Ronx said:
Have you published the web to a different computer and tried viewing from
your computer?

'... the box that says "Allow Active content to run in files on my
computer"' is referring to files that are physically located on "my
computer" - it does not refer to files physically located on a different
computer (AKA the server), so a visitor to your website will not notice
any
problems (unless you are using Active X or the like).

--
Ron Symonds (Microsoft MVP - FrontPage)
Reply only to group - emails will be deleted unread.


Paul Horvath said:
Dear Stefan,
I too am having BIG problems with our company website
since the ridiculously high security settings of XPSP2.
I have also visited the link you provided but it does not
tell you how to overcome this problem in your web page
code. An even bigger problem is that ANY bahivour you put
into an even basic HTML webpage is now rejected by
IE6SP2. So, even the Microsoft's OWN code generated by
its own Web Authoring program (FP2003)is rejected by
IE6SP2. Let me clarify rejected. Even a basic Marquee
with NO OTHER items on the page results in the IE6SP2
browser INFORMATION BAR being displayed asking you
to "allow" the "active content" that "could access your
computer".
This is ridiculous. Even a simple "Jump menu" results in
the same Information bar warning. YET, I can visit other
websites, which also have jump menus and they DO NOT GET
BLOCKED. So I need to know what part of the code
IE6SP2 "sees" as potentially unsafe, and how to get
around this. How do I make the broser "see" this
as "safe"??? I would have thought that Microsoft would
have made their OWN WEB AUTHORING software compatible
with the NEW OVER CAUTIOUS browser settings. Of course I
know how to turn this off in the browser, but how's it
going to look if I have to put a message on our website
saying "Please go to INTERNET OPTIONS>ADVANCED TAB> and
tick the box that says "Allow Active content to run in
files on my computer". This really would make our company
aas well as myself look very unprofessional. So I feel
that many of us web authors need to have clear directions
as to HOW we make the code "safe" OR, Microsoft has to
change code that FP2003 produces in a web page in order
for it to be seen as "safe" by IE6SP2.
Can anyone help us???????
Regards,
Paul Horvath,
Melbourne, Australia.
-----Original Message-----
See
http://www.microsoft.com/technet/prodtechnol/winxppro/main
tain/sp2brows.mspx

--

_____________________________________________
SBR @ ENJOY (-: [ Microsoft MVP -
FrontPage ]
"Warning - Using the F1 Key will not break anything!" (-
;
To find the best Newsgroup for FrontPage support see:
http://www.net-sites.com/sitebuilder/newsgroups.asp
_____________________________________________


message | I have my index page set up with layers tell what is in
| the different sections. But when the site is open the
| layers are blocked from showing but to security issues
in
| SP2. Can you help me set up the page so it will allow
the
| contents of my layers.
|


.
 
P

Paul Horvath

Dear Ron,

Thanks for the reply. I actually knew about the 2 options in the advanced
tab, but thought there may be a way to code these these "active" components
differently so that they are not blocked.
It looks like we will have to include some instructions wtih our product CD
showing how to tick those 2 checkboxes, or even forget about delivering them
on a web based CD. We may have to look at another program which has it's own
runtime.

It's really a shame that because of unscrupulous scum who code web pages to
execute malicious scripts, deposit reg keys, and pop-up 10 new windows at a
time, that both the end user and the web designers now all have to pay the
price of high security.

Thanks again for your assistance.
Regards,
Paul Horvath

Ronx said:
Viewing files locally, or from CD requires each user running WindowsXP SP2
to set up IE individually.
In IE, Tools->Internet Options->Advanced Tab
Scroll down to Security section
Tick the check boxes:
Allow active content from CDs to run on my computer
Allow active content to run in files on my computer

The only alternative to this is to use a different browser and/or operating
system - again, an individual's choice.
--
Ron Symonds (Microsoft MVP - FrontPage)
Reply only to group - emails will be deleted unread.


Paul Horvath said:
Dear Ron,
Well, I hate to admit it, but you are 100% correct.

The pages all view OK when viewed from the web server.
However, there is still one problem, I also use these web pages viewed
from
a CDROM, and in that case it is still a problem. Basically I have a page
which has product groups in Jump menus (dropdown menus), and within the
jump
menus are links to pdf files which contain product information.
Any ideas on how to overcome that problem ?

Thank you so much for making me aware that the pages will not be blocked
when viewed from the web server. I kept previewing my pages locally having
the information bar constantly showing up.

Your help is much appreciated.
Cheers,
Paul Horvath.

Ronx said:
Have you published the web to a different computer and tried viewing from
your computer?

'... the box that says "Allow Active content to run in files on my
computer"' is referring to files that are physically located on "my
computer" - it does not refer to files physically located on a different
computer (AKA the server), so a visitor to your website will not notice
any
problems (unless you are using Active X or the like).

--
Ron Symonds (Microsoft MVP - FrontPage)
Reply only to group - emails will be deleted unread.


Dear Stefan,
I too am having BIG problems with our company website
since the ridiculously high security settings of XPSP2.
I have also visited the link you provided but it does not
tell you how to overcome this problem in your web page
code. An even bigger problem is that ANY bahivour you put
into an even basic HTML webpage is now rejected by
IE6SP2. So, even the Microsoft's OWN code generated by
its own Web Authoring program (FP2003)is rejected by
IE6SP2. Let me clarify rejected. Even a basic Marquee
with NO OTHER items on the page results in the IE6SP2
browser INFORMATION BAR being displayed asking you
to "allow" the "active content" that "could access your
computer".
This is ridiculous. Even a simple "Jump menu" results in
the same Information bar warning. YET, I can visit other
websites, which also have jump menus and they DO NOT GET
BLOCKED. So I need to know what part of the code
IE6SP2 "sees" as potentially unsafe, and how to get
around this. How do I make the broser "see" this
as "safe"??? I would have thought that Microsoft would
have made their OWN WEB AUTHORING software compatible
with the NEW OVER CAUTIOUS browser settings. Of course I
know how to turn this off in the browser, but how's it
going to look if I have to put a message on our website
saying "Please go to INTERNET OPTIONS>ADVANCED TAB> and
tick the box that says "Allow Active content to run in
files on my computer". This really would make our company
aas well as myself look very unprofessional. So I feel
that many of us web authors need to have clear directions
as to HOW we make the code "safe" OR, Microsoft has to
change code that FP2003 produces in a web page in order
for it to be seen as "safe" by IE6SP2.
Can anyone help us???????
Regards,
Paul Horvath,
Melbourne, Australia.
-----Original Message-----
See
http://www.microsoft.com/technet/prodtechnol/winxppro/main
tain/sp2brows.mspx

--

_____________________________________________
SBR @ ENJOY (-: [ Microsoft MVP -
FrontPage ]
"Warning - Using the F1 Key will not break anything!" (-
;
To find the best Newsgroup for FrontPage support see:
http://www.net-sites.com/sitebuilder/newsgroups.asp
_____________________________________________


message | I have my index page set up with layers tell what is in
| the different sections. But when the site is open the
| layers are blocked from showing but to security issues
in
| SP2. Can you help me set up the page so it will allow
the
| contents of my layers.
|


.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top