latest IE security patch breaks applet -> js communication!!

  • Thread starter Thread starter Guest
  • Start date Start date
MS04-025: Cumulative security update for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;[LN];867801

[[If you are a developer of Internet Explorer-based code that is affected by
these changes, we recommend that you examine the security implications of
your product and explore changes to your Internet Explorer-based code to
work around these changes. For additional information, click the following
article number to view the article in the Microsoft Knowledge Base:

A security update is available that adds additional restrictions to the
cross-domain security model that is used by Internet Explorer ]]
http://support.microsoft.com/default.aspx?kbid=875345
 
You betcha, dietrich. Looks you may be busy. ;-)

--
Hope this helps. Let us know.
Wes

In
dietrich ayala said:
thanks wes, i saw that. this entry
(http://support.microsoft.com/?id=875345) tipped me off to a possible
solution.

what a shame.

when MS releases "fixes" like that break APIs, and warns developers
*afterwards* that the solution is to rewrite the code that uses it,
businesses are hurt. very disappointing. but not very surprising :(

-d

Wesley Vogel said:
MS04-025: Cumulative security update for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;[LN];867801

[[If you are a developer of Internet Explorer-based code that is
affected by these changes, we recommend that you examine the
security implications of your product and explore changes to your
Internet Explorer-based code to work around these changes. For
additional information, click the following article number to view
the article in the Microsoft Knowledge Base:

A security update is available that adds additional restrictions to
the cross-domain security model that is used by Internet Explorer ]]
http://support.microsoft.com/default.aspx?kbid=875345

--
Hope this helps. Let us know.
Wes

In
dietrich ayala said:
our product has a java applet that calls a javascript function.

the latest IE security patch
(http://www.microsoft.com/technet/security/Bulletin/MS04-025.mspx)
breaks this.

the applet can no longer call the javscript function.

i've tried setting all the browser security options to the lowest
possible, but no change.

any ideas?

thanks!
 
Dietrich,
were you able to find a solution for the ploblem? We have the same
problem with connecting applets and javascript. Could you please post
your solution here if you have one?

Best regards
Philipp
 
Hi Dietrich,
Would you mind share your solution to this problem?

I am having the same problem after this patch is installed, that is, the
javascripts that invoke the HTML help file (CHM file) using the protocol
mk:@msitstore: does not work anymore. Is there any workaround?

Thanks a million.

dietrich ayala said:
thanks wes, i saw that. this entry (http://support.microsoft.com/?id=875345) tipped me off to a possible solution.

what a shame.

when MS releases "fixes" like that break APIs, and warns developers *afterwards* that the solution is to rewrite the code that uses it, businesses are hurt. very disappointing. but not very surprising :(

-d

Wesley Vogel said:
MS04-025: Cumulative security update for Internet Explorer
http://support.microsoft.com/default.aspx?scid=kb;[LN];867801

[[If you are a developer of Internet Explorer-based code that is affected by
these changes, we recommend that you examine the security implications of
your product and explore changes to your Internet Explorer-based code to
work around these changes. For additional information, click the following
article number to view the article in the Microsoft Knowledge Base:

A security update is available that adds additional restrictions to the
cross-domain security model that is used by Internet Explorer ]]
http://support.microsoft.com/default.aspx?kbid=875345

--
Hope this helps. Let us know.
Wes

In
dietrich ayala said:
our product has a java applet that calls a javascript function.

the latest IE security patch
(http://www.microsoft.com/technet/security/Bulletin/MS04-025.mspx)
breaks this.

the applet can no longer call the javscript function.

i've tried setting all the browser security options to the lowest
possible, but no change.

any ideas?

thanks!
 
Hoa said:
Hi Dietrich,
Would you mind share your solution to this problem?

I am having the same problem after this patch is installed, that is, the
javascripts that invoke the HTML help file (CHM file) using the protocol
mk:@msitstore: does not work anymore. Is there any workaround?
Hi

Have you installed this hotfix to see if that helps:

http://support.microsoft.com/?kbid=811630
 
Back
Top