Share via

Updated Documentation on Controlling Security Restrictions

The information published in this post is now out-of-date and one or more links are invalid.

—IEBlog Editor, 21 August 2012

Our documentation team has just completed updating our documentation covering how administrators and developers can control certain features. This includes the following articles:

These documents are useful in understanding the security work undertaken in Windows XP SP2 and how it affects development. If you have any comments on this or any of our documentation on MSDN we’d appreciate the feedback.

Thanks
-Dave

Comments

  • Anonymous
    January 01, 2003
    In all honesty Dave, I'm impressed...

    But in all seriousness, their are more important things that we'd like the IE team to blog about...

    Cater to us, not to yourselves.
  • Anonymous
    January 01, 2003
    <b>Very useful docs thanks</b> :)
  • Anonymous
    January 01, 2003
    The comment has been removed
  • Anonymous
    January 01, 2003
    On a related topic, I've always wondered why script-src scripts aren't handled based on the source domain. For example, if I have an HTML page in the Internet zone with a script tag that references a Restricted-zone site, the script from the restricted site runs even if I've disabled scripting in the restricted zone. Doesn't this basically elevate restricted zone scripts to the Internet zone?
  • Anonymous
    January 01, 2003
    Hi Dave,
    You bring up an interesting point. If a script file is loaded from a different site it is run in the context of the site doing the loading rather than the site from which it was loaded.
    For many websites this is extremely useful however a web developer should be really sure that they are in control and trust the site providing the script.
    Thanks
    -Dave
  • Anonymous
    January 01, 2003
    Pop-up Blocker:

    I.e. you skipped to block Pop-ups created with window.document.open() ?!?

    I'll do a double take,
    Baywork
  • Anonymous
    January 01, 2003
    Guess who failed the Acid2 test? Everyone! http://webstandards.org/act/acid2/test.html
  • Anonymous
    January 01, 2003
    >If a script file is loaded from a different site
    >it is run in the context of the site doing the
    >loading rather.
    So the only way to completely opt-out certain domains is to use host file?

    OT:
    Current Privacy tab.
    http://www.utexas.edu/its/windows/resources/graphics/popd-privacy.jpg

    Could these be streamlined?
    My exprerience is that people get confused with the slider. For example they seem to think that Medium disables all third party cookies.
    Also automatic cookie deletion option would be nice.