Groups > Browsers > Internet Explorer Security > IE7 doesn't display "mixed" for security zones any more




IE7 doesn't display "mixed" for security zones any
more

IE7 doesn't display "mixed" for security zones any more
Wed, 12 Mar 2008 01:18:00 -070
Since upgrading to IE7, we've found that Internet Explorer no longer 
accurately displays the security zone pages are running under.

Under IE6, a page would only display as "Trusted" if all content in
the page 
was in that zone.  If any content was coming from a non trusted source, it 
would display as "Mixed".

Under IE7 this is no longer the case, if the main site is trusted it shows 
the whole page as trusted.

This isn't a security problem - IE7 still correctly keeps everything in the 
correct zones, but it does make troubleshooting a nightmare if you have a 
page that isn't working correctly.  We use IE's Security Zones extensively to 
prevent malicious code infecting our computers.  Sites have to be placed in 
the trusted sites zone in order to run scripts, and the internet zone is very 
heavily locked down.

The problem we have now is that a site can appear to be Trusted, but not run 
correctly.  We have to view the source for the page, and search for all 
http:// elements to see if any are coming from another page.

Can somebody please correct this code so that:

a)  IE7 correctly displays the security zone as "mixed" when required
b)  If possible, update "Mixed" so that it also displays all the URL's
of 
the current page

----------------
This post is a suggestion for Microsoft, and Microsoft responds to the 
suggestions with the most votes. To vote for this suggestion, click the "I

Agree" button in the message pane. If you do not see the button, follow
this 
link to open the suggestion in the Microsoft Web-based Newsreader and then 
click "I Agree" in the message pane.

Post Reply
about | contact