Re: Trying to get CSS StyleSheet rules (MARK OF THE WEB / security problem)

Article View: microsoft.public.inetsdk.programming.wininet

Article #1

Back to microsoft.public.inetsdk.programming.wininet Previous Next

From: danieldc
Date: Thu, 03 Aug 2006 14:59

29 lines
2851 bytes

I can't believe that I found the problem just at MicroShit Windows XP
Service Pack 2 ultra upgrade for security patch called Mark of the Web.


When I was testing document online, I can not guess what was
happening... but using small files at computer (local drive), I
discovered that putting at begginig of the Html File that small comment
"<!-- saved from url=(xxxx)http://url.address.com/path/ -->" made
IExploited apply some or other security zone.

Then the question now is to change all HTML saved files (easy done with
some Search&Replace program). But the html pages online I will have to
look about the security zones and the configuration of this machine
(and ITech people will not allow me to do what I want), then the
problem seens to be unsolvable...


Here are some infos about this "Mark of the Web":

http://msdn.microsoft.com/library/default.asp?url=/workshop/author/dhtml/overview/motw.asp

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2brows.mspx


http://www.google.com.br/search?q=%22saved+from+url%3D%22+security&meta=


Yours, Daniel
from Brazil

Technical Details

Message-ID: <1154617158.745760.150290@i3g2000cwc.googlegroups.com>

Path: arc1-ca.pugleaf.net!g2news2.google.com!postnews.google.com!i3g2000cwc.googlegroups.com!not-for-mail

References: <1154457789.427318.252440@s13g2000cwa.googlegroups.com> <1154611678.840257.320960@m79g2000cwm.googlegroups.com>

Show Full Headers

Complete Article Headers

X-Google-Thread: 115f11,e28ed9ee2bf0906
X-Google-Thread: 1036eb,e580e471b8675c04
X-Google-Thread: fb362,f1bb71a7a6fab2a8,start
X-Google-Thread: 1046af,f1bb71a7a6fab2a8,start
X-Google-Attributes: gid115f11,gid1036eb,gidfb362,gid1046af,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news2.google.com!postnews.google.com!i3g2000cwc.googlegroups.com!not-for-mail
From: "danieldc" <danielgudang@gmail.com>
Newsgroups: microsoft.public.inetsdk.programming.wininet,borland.public.delphi.internet.winsock,borland.public.delphi.internet,microsoft.public.inetsdk.programming.webbrowser_ctl
Subject: Re: Trying to get CSS StyleSheet rules (MARK OF THE WEB / security problem)
Date: 3 Aug 2006 07:59:18 -0700
Organization: http://groups.google.com
Lines: 30
Message-ID: <1154617158.745760.150290@i3g2000cwc.googlegroups.com>
References: <1154457789.427318.252440@s13g2000cwa.googlegroups.com>
   <1154611678.840257.320960@m79g2000cwm.googlegroups.com>
NNTP-Posting-Host: 161.148.112.51
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
X-Trace: posting.google.com 1154617163 32262 127.0.0.1 (3 Aug 2006 14:59:23 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Thu, 3 Aug 2006 14:59:23 +0000 (UTC)
In-Reply-To: <1154611678.840257.320960@m79g2000cwm.googlegroups.com>
User-Agent: G2/0.2
X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; NetCaptor 7.5.1; .NET CLR 1.1.4322),gzip(gfe),gzip(gfe)
X-HTTP-Via: 1.1 netappbsb2 (NetCache NetApp/6.0.3P2), 1.1 netappbsb2 (NetCache NetApp/6.0.3P2)
Complaints-To: groups-abuse@google.com
Injection-Info: i3g2000cwc.googlegroups.com; posting-host=161.148.112.51;
   posting-account=urqTwAwAAABGsJrf9-fN6VstE6YuU32f

Reply to Parent Message