|
| IE7 doesn't display "mixed" for security zones any more |
 |
Wed, 12 Mar 2008 01:18:00 -070 |
Since upgrading to IE7, we've found that Internet Explorer no longer
accurately displays the security zone pages are running under.
Under IE6, a page would only display as "Trusted" if all content in
the page
was in that zone. If any content was coming from a non trusted source, it
would display as "Mixed".
Under IE7 this is no longer the case, if the main site is trusted it shows
the whole page as trusted.
This isn't a security problem - IE7 still correctly keeps everything in the
correct zones, but it does make troubleshooting a nightmare if you have a
page that isn't working correctly. We use IE's Security Zones extensively to
prevent malicious code infecting our computers. Sites have to be placed in
the trusted sites zone in order to run scripts, and the internet zone is very
heavily locked down.
The problem we have now is that a site can appear to be Trusted, but not run
correctly. We have to view the source for the page, and search for all
http:// elements to see if any are coming from another page.
Can somebody please correct this code so that:
a) IE7 correctly displays the security zone as "mixed" when required
b) If possible, update "Mixed" so that it also displays all the URL's
of
the current page
----------------
This post is a suggestion for Microsoft, and Microsoft responds to the
suggestions with the most votes. To vote for this suggestion, click the "I
Agree" button in the message pane. If you do not see the button, follow
this
link to open the suggestion in the Microsoft Web-based Newsreader and then
click "I Agree" in the message pane.
|
| Post Reply
|
|
|
|
|
|
|
|
|
|