You Can Only Use Trusted Documents to Open Other Documents in the My Computer Zone (330913)
The information in this article applies to:
- Microsoft Internet Explorer 6.0 SP1, when used with:
- the operating system: Microsoft Windows XP
- the operating system: Microsoft Windows 2000
- the operating system: Microsoft Windows NT 4.0
- the operating system: Microsoft Windows 98 Second Edition
This article was previously published under Q330913 SUMMARY For security reasons, Internet Explorer 6 Service Pack 1
has changed from Internet Explorer 6 or previous versions when you move from an
untrusted zone to the "My Computer" zone. As a result, some programs may no
longer work correctly with Internet Explorer after you upgrade to Internet
Explorer 6 SP1. The following examples illustrate such scenarios:
- Example 1 : You cannot display HTML documents that are
saved on your hard disk.
When you save an HTML document to a local
drive, Internet Explorer adds a "mark of the Web" string in the saved HTML
document. Because Internet Explorer assigns a document that has the "mark of
the Web" to the Internet zone, you cannot move from this document in the
Internet Zone to a document in the My Computer zone. - Example 2 : A java applet uses the showDocument function to open a local document.
A Java applet that
uses the showDocument function to open a local document in the Internet zone does not
load the document in the My Computer zone.
MORE INFORMATION Internet Explore 6 Service Pack 1 includes new security
code checks that help to prevent zone elevation.
NoteZone elevation is the attempt to gain access to a more secured zone from a less
secured zone. For example, a malicious user tries to gain access to the My Computer zone from the
Internet zone.
Because of the new security
code checks, documents in the Internet zone cannot have access through
hypertext reference (HREF) links or scripting to documents in the My Computer
zone. Only documents located in the Trusted sites zone or the My Computer zone
can access documents in the My Computer zone. Therefore, if you want to permit
untrusted documents to access documents in the My Computer zone, you must add
the source URL in the Trusted sites zone. Do so with caution and careful
thought to prevent a potential security weakness.
Modification Type: | Minor | Last Reviewed: | 9/15/2006 |
---|
Keywords: | kbinfo KB330913 |
---|
|