Solved

Activex unsafe warning - COM C# component

Posted on 2002-04-15
12
922 Views
Last Modified: 2013-11-25
I have a simple C# object(class) that I reference in a <OBJECT clsid="...> tag of an HTML page. I've putted this object into the GAC with gacutil and registered it as COM object with the regasm utility program. The <object> references the clsid in the registry.

Is there an easy way of bypassing the Activex warning in Internet Explorer whithout modifying the security level in the browser?

In an old COM-ATL object, I was using the IObjectSafetyImpl<CMyCtrl, INTERFACESAFE_FOR_UNTRUSTED_CALLER|INTERFACESAFE_FOR_UNTRUSTED_DATA> derivation to avoid this type of message. Is there a way of doing the same thing in C#?

My component will be used in an intranet solution only whithout needs to be visible in the client application.

Is that the better way I use to make a component in Dot Net for referencing in the browser? What are the other solutions?
0
Comment
Question by:mhebert
  • 4
  • 2
  • 2
  • +3
12 Comments
 
LVL 22

Expert Comment

by:CJ_S
Comment Utility
Sure there is a way. I just forgot how it was implemented :-(
0
 
LVL 54

Expert Comment

by:nico5038
Comment Utility

No comment has been added lately, so it's time to clean up this TA.
I will leave a recommendation in the Cleanup topic area that this question is:
 - To be deleted and points refunded
Please leave any comments here within the
next seven days.

PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER !

Nic;o)
0
 
LVL 22

Expert Comment

by:CJ_S
Comment Utility
mhebert, is this still an issue?

nico5038,
I can help this person if he still needs this. Can we keep this one open unless mhebert does not reply?
0
 
LVL 54

Expert Comment

by:nico5038
Comment Utility
No problem with me, a mod will ignore my proposal because of your comment!

Nic;o)
0
 
LVL 1

Author Comment

by:mhebert
Comment Utility
It's still an issue... ;-)
0
 
LVL 22

Expert Comment

by:CJ_S
Comment Utility
mhebert,
Where is the object registered? At the server or at the client? At the server you should use the http protocol:

classid="http:MyControl.dll#FULLY.QUALIFIED.NAME"

Place the file and the .dll in a virtual directory. Or place the .dll in the gac like you did. The virtual directory should only have script permissions. No other setting!!!

CJ
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 
LVL 1

Author Comment

by:mhebert
Comment Utility
The object is registered on the client. It acts like an activex.
0
 
LVL 22

Accepted Solution

by:
CJ_S earned 100 total points
Comment Utility
I was hoping it was not the case. For client side .Net components you can do two things.

1) Change the client ActiveX settings
2) Sign the ActiveX control or object.

Signing ActiveX can be done by a company like VeriSign. They can mark your component to be safe for initialization and scripting. But even then, if the client does not allow components marked safe for initialization or scripting it just won't run.

CJ
0
 
LVL 1

Expert Comment

by:Computer101
Comment Utility
Listening

Computer101
E-E Admin
0
 
LVL 7

Expert Comment

by:peterchen092700
Comment Utility
So folks, what to do?

No comment has been added lately.
To cleanup this TA, I will recommend to moderators that this question is:

*** Answered by: CJ_S ***

Please leave any comments here within the next seven days, or finalize the question if you own it
 
PLEASE DO NOT ACCEPT THIS COMMENT AS AN ANSWER!
 
peterchen
EE Volunteer
0
 
LVL 1

Expert Comment

by:Computer101
Comment Utility
A request for deletion has been made.  If no response or you feel this is in error, comment.  If no objection, I will delete in three days.

Computer101
E-E Admin
0
 

Expert Comment

by:Chmod
Comment Utility
No response from mhebert to CJ_Ss comment on 12/03/2002 05:44AM PST or to Computer101 in http://www.experts-exchange.com/Community_Support/Q_20531246.html. Hence closed as recommended by peterchen

Chmod
Community Support Moderator @Experts Exchange

0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

A short article about a problem I had getting the GPS LocationListener working.
Displaying an arrayList in a listView using the default adapter is rarely the best solution. To get full control of your display data, and to be able to refresh it after editing, requires the use of a custom adapter.
Viewers will learn how to properly install Eclipse with the necessary JDK, and will take a look at an introductory Java program. Download Eclipse installation zip file: Extract files from zip file: Download and install JDK 8: Open Eclipse and …
The viewer will be introduced to the technique of using vectors in C++. The video will cover how to define a vector, store values in the vector and retrieve data from the values stored in the vector.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now