We help IT Professionals succeed at work.

Security manager in IE 3.02

denty
denty asked
on
Medium Priority
209 Views
Last Modified: 2010-04-16
Hi folks,

Can some kind soul explain the security policies enforced by MS IE 3.02? Specifically I want to know if I can load a native library (but that's not essential) and whether I can receive from a UDP socket (that is).

The other thing I really want is to be able to pop up a Java console window to watch for exceptions being thrown... can this be done: I can't see any menu items related to it.

Thanks in advance,
denty.
Comment
Watch Question

To answer your questions

>Can some kind soul explain the security policies enforced by >MS IE 3.02?

3.02 is a patch that semi-succesfuly plugs two breaches in ActiveX security on win95 and NT. Specificaly, it adds a dialog requesting permition to execute potentialy damaging code when this code is contained in a .URL file. (There is another extention but I have forgotten what it was). Nothing to exiting.

The purpose of the patches is to (potentialy) stop a program that calls keyboard macros (recorders) from doing anything they want on a clients box via OLE/DCOM automation.


>I want to know if I can load a native library

Yes, provided its signed.


>whether I can receive from a UDP socket


Yes, same as always, resticted to firewalls and Proxy servers.


>pop up a Java console window to watch for exceptions being >thrown

No option to actualy do this in IE. But a plausible work arround is to use a debug window class that can print out that kind of info for you.

I believe you can find such a class in:

http://www.gamelan.com

If its not there, post a comment here and I'll look up some addresses for you.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
Great, thanks jpk. I thought you must be able to do such things but the lack of the console window doesn't make things easy to debug.

One further point though, will IE assume native libraries held locally are signed?

Nope, Applet security specifications under JAVA indicate that anyting running in a browser is to be considered insecure.

Applications, though, are only restricted by OS directory and file access permitions.

As an extra comment regarding debugging, For testing purposes, O'Rielley's Web Site  stores just about every imaginable error in its log files (if you tur on the correct options) and has a free version at http://www.ora.com under the software free software section.

Its not the greates substitute for a console, but can be alot of help.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.