Internet Explorer 8 - User Agent String
Clients - Windows XP, Windows Vista, Windows 7
Servers - Windows Server 2003, Windows Server 2008, Windows Server 2008 R2
Severity - Medium
Frequency - High
The User Agent String is the Internet Explorer identifier that provides data about its version and other attributes to web servers. Many web applications rely on, and piggyback on, the IE User Agent String. Those that do so and depend on an earlier version number will be impacted. The User Agent string now includes the string 'Trident/4.0' in order to allow differentiation between the Internet Explorer 7 User Agent String and the Internet Explorer 8 User Agent string when running in Internet Explorer 7 Compatibility View. See Understanding User Agent Strings for details.
Manifestation of Impact
There are two impacted areas:
- Webpages that explicitly check the User Agent String and do not support the Internet Explorer 8 User Agent String may not run properly. In the majority of cases, this means the pages will be block users from the content they are attempting to access or display incorrect or malformed content.
- Applications that host Trident (see Hosting and Reuse) will default to Internet Explorer 7 using the Web Optional Component, but will not have access to Internet Explorer 8 features.
Ensure that your applications properly handle the new 'MSIE 8.0' version in the User Agent String. You may also opt in to the Internet Explorer 7 Compatibility View for those applications based on Internet Explorer 7. This can be done with meta tags. See the discussion in Understanding User Agent Strings for details.
Compatibility, Performance, Reliability, and Usability Testing
- Run your applications and webpages in an Internet Explorer 8 environment on Windows Vista or Windows XP to ensure that they behave in the desired manner.
- Alternatively, you can run the Internet Explorer Compatibility Test Tool (IECTT) provided with the Application Compatibility Toolkit (ACT) to locate any potential issues due to security feature updates.
Links to Other Resources
- Understanding User Agent Strings
- Internet Explorer 8 User-Agent String
- Hosting and Reuse
- Application Compatibility Toolkit Download
- Known Internet Explorer Security Feature Issues