Actually, it is an IE 8.0 and they have a new "feature" called cross. You can turn it off in Security > Custom Level > Scroll all the way to the bottom and there is an option for Enable XSS filter - Disable this. All my clients will have to do this for anyone that updates to IE 8.0. Thanks Microsoft for screwing things up again! People should decide who to trust!!
If anyone knows a work around for not having to disable this, that would be great.
Main Topics
Browse All Topics





by: SidFishesPosted on 2009-04-16 at 10:01:06ID: 24159869
this works fine in IE8 so it's not a IE8 issue..
" resolveurl="yes">
t#</cfoutpu t>
<cfhttp url="http://www.google.com
</cfhttp>
<cfoutput>#cfhttp.FileConten
. there must be an issue with the way the site is set up (and have you checked to make sure it's not been compromised and is not in fact serving an xss exploit?)