• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 197
  • Last Modified:

Security manager in IE 3.02

Hi folks,

Can some kind soul explain the security policies enforced by MS IE 3.02? Specifically I want to know if I can load a native library (but that's not essential) and whether I can receive from a UDP socket (that is).

The other thing I really want is to be able to pop up a Java console window to watch for exceptions being thrown... can this be done: I can't see any menu items related to it.

Thanks in advance,
denty.
0
denty
Asked:
denty
  • 2
1 Solution
 
jpk041897Commented:
To answer your questions

>Can some kind soul explain the security policies enforced by >MS IE 3.02?

3.02 is a patch that semi-succesfuly plugs two breaches in ActiveX security on win95 and NT. Specificaly, it adds a dialog requesting permition to execute potentialy damaging code when this code is contained in a .URL file. (There is another extention but I have forgotten what it was). Nothing to exiting.

The purpose of the patches is to (potentialy) stop a program that calls keyboard macros (recorders) from doing anything they want on a clients box via OLE/DCOM automation.


>I want to know if I can load a native library

Yes, provided its signed.


>whether I can receive from a UDP socket


Yes, same as always, resticted to firewalls and Proxy servers.


>pop up a Java console window to watch for exceptions being >thrown

No option to actualy do this in IE. But a plausible work arround is to use a debug window class that can print out that kind of info for you.

I believe you can find such a class in:

http://www.gamelan.com

If its not there, post a comment here and I'll look up some addresses for you.
0
 
dentyAuthor Commented:
Great, thanks jpk. I thought you must be able to do such things but the lack of the console window doesn't make things easy to debug.

One further point though, will IE assume native libraries held locally are signed?

0
 
jpk041897Commented:
Nope, Applet security specifications under JAVA indicate that anyting running in a browser is to be considered insecure.

Applications, though, are only restricted by OS directory and file access permitions.

As an extra comment regarding debugging, For testing purposes, O'Rielley's Web Site  stores just about every imaginable error in its log files (if you tur on the correct options) and has a free version at http://www.ora.com under the software free software section.

Its not the greates substitute for a console, but can be alot of help.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now