Hi devs and friends,

I've spent a fair couple of evenings going through the various XP SP2
problems in DQSD.

While I think I've found enough registry settings to tweak to silence IE,
I'm not entirely comfortable disabling browser security entirely to make
DQSD run.

So, I took a step back and started investigating the "mark of the web" [1]
again. It appears that adding one of those comments to search.htm makes it
render properly in the task bar. Great.

Now there's the dynamically generated pages:

- help window
- help popup from qsfind
- comx popup
- calendar

The help window was fixable, by adding a mark of the web to the dynamically
gen:ed HTML stream, just before the body - seems to be working OK (there are
some minor issues, but it renders nicely).

The popups, however, are harder. They all throw an Access Denied box, and it
appears to be because of convertStylesToInline. It runs through all
stylesheet rules on the main document, and builds an inline style decl from
them. Great idea - unfortunately, it was deemed a security risk [2], and MS
decided to prohibit it. So, long story short - does anyone have an
alternative implementation, that may be run from a locked-down environment?

Cheers,
Kim

[1]
http://msdn.microsoft.com/security/productinfo/XPSP2/securebrowsing/lockdown
_devimp.aspx
[2] http://www.security.nnov.ru/search/document.asp?docid=2711



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
DQSD-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/dqsd-devel

Reply via email to