(no subject)

From: the Pull (iuoi@iou.com)
Date: 09/21/02 

From: the Pull <iuoi@iou.com>
Date: Sat, 21 Sep 2002 09:58:44 GMT

Steve wrote:
>
> I just updated by XP home edition with SP1 and my IE got updated with
> it. My current version is now 6.0.2800.1106.xpsp1.020828-1920
>
> I now noticed a change in IE's redirecting. So it seems, you are not
> allowed anymore to redirect from an html page on the web, to a page
> locally - for ex. file:///c:/here/local.html It says Permission
> Denied. This is important to me and I need a way to figure how to do
> this. It doesnt matter to me if I have to sign any script or sign
> anything, I just need a way to do this. Please does anyone know a way?
>
> Thanks in advance
> Steve

Yeah, it is a security fix snuck into the service pack, amongst a large
number of other ones. For years IE had allowed behavior that Netscape
did not allow. They just went and fixed about fifty of these issues.

The issue you are talking about is pretty serious and is used in
a lot of vulnerabilities. This fix really helps them and they should
have done it sooner.

You simply need to find a way around it and NOT consider backtracking
your version. You will not, I believe, be able to set anything to
change this. It is not optional. There is surely a way to get done
what you need to get done safely, though...

>
> -------------------------
>
> (If you wondering why would i need to redirect to a local file.... I
> have an application composed of signed jared files and other files -
> they are big, over 1MB. Now you can load the signed java applet online
> but that means you have to wait everytime to load all the files, then
> use the application. So what I did is create an installer, that saves
> the files to your local drive, along with the html file the first
> time. Then the next time you want to load the application, the
> installer checks quickly if you have files, and if you do, it then
> just automatically redirects you the local file which loads the applet
> instantly. My application is intended to be used a lot, so it is
> better to download to the system so you dont have to wait for the big
> download everytime.)

I honestly still don't fully understand your model here, and I have
experience with such applications. We used large jar files for a java
app that sped up downloading of files called "Swarmcast" at a place
where I worked. We used a signed distribution and installer from
I forget the name of the company, zero something... then used webstart to start
the app afterwards:->

http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=java+webstart 

-- 
***
Sweeper - a truly original and powerful security product
http://members.cox.net/osioniusx

Relevant Pages

  • Re: Powerpoint load time in autostart
    ... There'll still be a delay as PPT loads each segment, but since it doesn't have to ... >> It takes time for PPT to load and process data. ... >> Steve Rindsberg, PPT MVP ...
    (microsoft.public.powerpoint)
  • Re: Best MPG : 5-speed vs. auto?
    ... "Steve B." ... etc. have a load bias to one side of the mating surfaces. ... When you are floating in neutral, the joints are bouncing 'up and down' ... A bad u-joint starts vibrating when you are between ...
    (rec.autos.tech)
  • Re: Post with redirect?
    ... How can I force a POST but actually redirect the user as well ... and it can't be done with PHP. ... thing jerry got right is that it would be a lot of work. ... Hi Steve, ...
    (comp.lang.php)
  • Re: Server.Transfer goes to wrong page
    ... long-running pages as a countdown during load. ... it was a client-side redirect, I never caught it in my debugger. ... >>preserveForm), the first time, it loads up BasicReports again. ...
    (microsoft.public.dotnet.framework.aspnet)
  • (no subject)
    ... (If you wondering why would i need to redirect to a local file.... ... Now you can load the signed java applet online ... So what I did is create an installer, ...
    (comp.security.misc)