https://bugzilla.wikimedia.org/show_bug.cgi?id=21714

           Summary: ActiveX prompt on IE8
           Product: MediaWiki extensions
           Version: any
          Platform: PC
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: Normal
         Component: UsabilityInitiative
        AssignedTo: [email protected]
        ReportedBy: [email protected]
                CC: [email protected]


Created an attachment (id=6849)
 --> (https://bugzilla.wikimedia.org/attachment.cgi?id=6849)
Screenshot showing the ActiveX prompt on IE8

The usability JS causes IE with certain "Internet security" settings to display
a prompt about ActiveX. See the attached screenshot from IE8.

jquery unconditionally uses the ActiveX implementation of XHR on IE, even if
window.XmlHttpRequest exists. This may cause this prompt (before page display)
on IE depending on the setting of the "internet security options", which a user
may not even have control over as these "internet security" settings are
frequently locked off for normal users on Windows boxes. If the setting is set
to "prompt", the prompt will appear each and every time a page is visited on
any WMF project where the UsabilityInitiative JS runs. (Or even, where jquery
runs.)

This applies to IE6, IE7, and also IE8.

IMO jquery should be patched such that it uses window.XmlHttpRequest when
available, and furthermore such that it doesn't try to instantiate an ActiveX
control already upon loading, but only when really needed (such as in response
to a mouse click). Unfortunately there is no way (that I know of) a JS could
detect that client-side setting, so the best bet is to make sure that at least
plain viewing of pages doesn't trigger that stupid prompt.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to