Active Content? - ASP / Active Server Pages

McKirahan

What is "active content"? My ASP page just returns HTML....
I have a page with an .htm extension that has a form whose action
is an ASP page which generates a report after updating a database
with the form data.

Under Windowx XP SP2 the IE6 "Informatio n Bar" has the message:

"To help protect your security, Internet Explorer has restricted this
file from showing active content that could access your computer."

Jul 22 '05 #1

Subscribe Reply

1966

Curt_C [MVP]

Whats the code look like? Mostly likely some clientside events are getting
triggered that are being interpreted as malicious

--
Curt Christianson
Site & Scripts: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"McKirahan" <Ne**@McKirahan .com> wrote in message
news:zL******** ************@co mcast.com...

What is "active content"? My ASP page just returns HTML....
I have a page with an .htm extension that has a form whose action
is an ASP page which generates a report after updating a database
with the form data.

Under Windowx XP SP2 the IE6 "Informatio n Bar" has the message:

"To help protect your security, Internet Explorer has restricted this
file from showing active content that could access your computer."

Jul 22 '05 #2

McKirahan

"Curt_C [MVP]" <software_AT_da rkfalz.com> wrote in message
news:#w******** ******@TK2MSFTN GP09.phx.gbl...

Whats the code look like? Mostly likely some clientside events are getting
triggered that are being interpreted as malicious

--
Curt Christianson
Site & Scripts: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"McKirahan" <Ne**@McKirahan .com> wrote in message
news:zL******** ************@co mcast.com...
What is "active content"? My ASP page just returns HTML....
I have a page with an .htm extension that has a form whose action
is an ASP page which generates a report after updating a database
with the form data.

Under Windowx XP SP2 the IE6 "Informatio n Bar" has the message:

"To help protect your security, Internet Explorer has restricted this
file from showing active content that could access your computer."

Thanks for your reply. As I said, it returns just HTML:

<html>
<head>
<title>...</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<meta name="title" content="...">
<meta name="descripti on" content="...">
<meta name="keywords" content="...">
<meta name="author" content="...">
<style type="text/css">
td { font-family:Arial; font-size:8pt }
th { font-family:Arial; font-size:8pt; font-weight:bold }
..data { font-family:Arial; font-size:7pt; cursor:pointer; cursor:hand }
..hand { cursor:pointer; cursor:hand }
..head { font-family:Arial; font-size:9pt; font-weight:bold }
..lane { border-bottom:1px solid black }
..line { border:1px solid black }
..page { page-break-before:always }
</style>
</head>
<body>
<table border="0" cellpadding="0" cellspacing="0" width="709">
<tr>
<th align="left" class="head">.. .</th>
<th class="head">
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddl e">
  ...  
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddl e">
</th>
<th align="right" class="head">.. .</th>
</tr>
</table>
<br>
<table border="0" cellpadding="0" cellspacing="0" width="709" class="line">
<tr>
<th class="lane" width="118" align="left">.. .</th>
<th class="lane" width="60">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="120">... </th>
</tr>

</table>
<div class="page"></div>
</body>
</html>

Jul 22 '05 #3

Mark Schupp

"McKirahan" <Ne**@McKirahan .com> wrote in message
news:X9******** ************@co mcast.com...

"Curt_C [MVP]" <software_AT_da rkfalz.com> wrote in message
news:#w******** ******@TK2MSFTN GP09.phx.gbl...
Whats the code look like? Mostly likely some clientside events are
getting
triggered that are being interpreted as malicious

--
Curt Christianson
Site & Scripts: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"McKirahan" <Ne**@McKirahan .com> wrote in message
news:zL******** ************@co mcast.com...
> What is "active content"? My ASP page just returns HTML....
>
>
> I have a page with an .htm extension that has a form whose action
> is an ASP page which generates a report after updating a database
> with the form data.
>
> Under Windowx XP SP2 the IE6 "Informatio n Bar" has the message:
>
> "To help protect your security, Internet Explorer has restricted this
> file from showing active content that could access your computer."
>

Thanks for your reply. As I said, it returns just HTML:

<html>
<head>
<title>...</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<meta name="title" content="...">
<meta name="descripti on" content="...">
<meta name="keywords" content="...">
<meta name="author" content="...">
<style type="text/css">
td { font-family:Arial; font-size:8pt }
th { font-family:Arial; font-size:8pt; font-weight:bold }
.data { font-family:Arial; font-size:7pt; cursor:pointer; cursor:hand }
.hand { cursor:pointer; cursor:hand }
.head { font-family:Arial; font-size:9pt; font-weight:bold }
.lane { border-bottom:1px solid black }
.line { border:1px solid black }
.page { page-break-before:always }
</style>
</head>
<body>
<table border="0" cellpadding="0" cellspacing="0" width="709">
<tr>
<th align="left" class="head">.. .</th>
<th class="head">
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddl e">
  ...  
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddl e">
</th>
<th align="right" class="head">.. .</th>
</tr>
</table>
<br>
<table border="0" cellpadding="0" cellspacing="0" width="709"
class="line">
<tr>
<th class="lane" width="118" align="left">.. .</th>
<th class="lane" width="60">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="120">... </th>
</tr>

</table>
<div class="page"></div>
</body>
</html>

don't see anything obvious (unless there is something in the "..." areas
that you left out). try stripping out code until the message goes away
(start with the style block, it has the most unusual code).

--
--Mark Schupp

Jul 22 '05 #4

Adrienne

Gazing into my crystal ball I observed "Mark Schupp" <no******@email .net>
writing in news:ON******** *****@tk2msftng p13.phx.gbl:

"McKirahan" <Ne**@McKirahan .com> wrote in message
news:X9******** ************@co mcast.com...
"Curt_C [MVP]" <software_AT_da rkfalz.com> wrote in message
news:#w******** ******@TK2MSFTN GP09.phx.gbl...
Whats the code look like? Mostly likely some clientside events are
getting triggered that are being interpreted as malicious

--
Curt Christianson
Site & Scripts: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"McKirahan" <Ne**@McKirahan .com> wrote in message
news:zL******** ************@co mcast.com...
> What is "active content"? My ASP page just returns HTML....
>
>
> I have a page with an .htm extension that has a form whose action
> is an ASP page which generates a report after updating a database
> with the form data.
>
> Under Windowx XP SP2 the IE6 "Informatio n Bar" has the message:
>
> "To help protect your security, Internet Explorer has restricted
> this file from showing active content that could access your
> computer."
>

Thanks for your reply. As I said, it returns just HTML:

<html>
<head>
<title>...</title>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252"> <meta name="title" content="...">
<meta name="descripti on" content="...">
<meta name="keywords" content="...">
<meta name="author" content="...">
<style type="text/css">
td { font-family:Arial; font-size:8pt }
th { font-family:Arial; font-size:8pt; font-weight:bold }
.data { font-family:Arial; font-size:7pt; cursor:pointer; cursor:hand
} .hand { cursor:pointer; cursor:hand }
.head { font-family:Arial; font-size:9pt; font-weight:bold }
.lane { border-bottom:1px solid black }
.line { border:1px solid black }
.page { page-break-before:always } </style> </head> <body>
<table border="0" cellpadding="0" cellspacing="0" width="709"> <tr>
<th align="left" class="head">.. .</th>
<th class="head">
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddl e">
  ...  
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddl e"> </th>
<th align="right" class="head">.. .</th> </tr> </table> <br>
<table border="0" cellpadding="0" cellspacing="0" width="709"
class="line"> <tr>
<th class="lane" width="118" align="left">.. .</th>
<th class="lane" width="60">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="120">... </th> </tr>
 </table>
<div class="page"></div> </body> </html>

don't see anything obvious (unless there is something in the "..."
areas that you left out). try stripping out code until the message goes
away (start with the style block, it has the most unusual code).

The style block looks good, no errors. If I were you, I would put the
style information in an external sheet. Don't use fixed font sizes the
user cannot resize, use ems or percentages (percantages are better because
IE has issues with ems), and the size you have declared may be too small
for some users. Also, the native behavior of the TH element is to center
bold, so font-weight:bold is redundant.

Do you have a URL? It would be helpful to see the real source.

My guess is there is something there that the script is outputting that is
not HTML, therefore, the browser is coming up with the message.

You might also want to check what content type the server is sending. Make
sure that it is text/html. If you are trying to serve content-type:
application/xhtml+xml IE does not know how to render it correctly and will
throw an error.

--
Adrienne Boswell
http://www.cavalcade-of-coding.info
Please respond to the group so others can share

Jul 22 '05 #5

McKirahan

"Adrienne" <ar********@sbc global.net> wrote in message
news:Xn******** *************** *****@207.115.6 3.158...

[snip]

Thanks anyway...

The style block looks good, no errors. If I were you, I would put the
style information in an external sheet. Don't use fixed font sizes the
user cannot resize, use ems or percentages (percantages are better because
IE has issues with ems), and the size you have declared may be too small
for some users. Also, the native behavior of the TH element is to center
bold, so font-weight:bold is redundant.
This page has a single user as it's part of an application.

Do you have a URL? It would be helpful to see the real source.
I posted a subset of the real source; "..." was subsitiuted in places.
My guess is there is something there that the script is outputting that is
not HTML, therefore, the browser is coming up with the message.
Nothing but HTML; not even JavaScript.

You might also want to check what content type the server is sending. Make sure that it is text/html. If you are trying to serve content-type:
application/xhtml+xml IE does not know how to render it correctly and will
throw an error.
I declared the content type with a meta tag.
--
Adrienne Boswell
http://www.cavalcade-of-coding.info
Please respond to the group so others can share

I found this though it doesn't seem to apply:

How to Disable Active Content in Internet Explorer
http://support.microsoft.com/kb/154036

In part it states:

Customizing Safety Levels for Active Content

While most active content contained in Web pages is safe, some Web pages
contain active content that can potentially cause security problems on your
computer. For example, an ActiveX control that runs automatically when you
load a particular Web page might damage your data or cause your computer to
become infected with a virus. Internet Explorer uses safety levels for
active content to help prevent this situation from occurring.

Jul 22 '05 #6

Adrienne

Gazing into my crystal ball I observed "McKirahan" <Ne**@McKirahan .com>
writing in news:y7******** ************@co mcast.com:

"Adrienne" <ar********@sbc global.net> wrote in message
news:Xn******** *************** *****@207.115.6 3.158...

[snip]

Thanks anyway...
The style block looks good, no errors. If I were you, I would put the
style information in an external sheet. Don't use fixed font sizes
the user cannot resize, use ems or percentages (percantages are better
because IE has issues with ems), and the size you have declared may be
too small for some users. Also, the native behavior of the TH element
is to center bold, so font-weight:bold is redundant.
This page has a single user as it's part of an application.

And only one user uses the application? Be aware if you ever want to port
this to an application that will be on the WWW you need to address this
issue.

Do you have a URL? It would be helpful to see the real source.
I posted a subset of the real source; "..." was subsitiuted in places.

It would still be good to see the source. Although you have substituted
.... there's nothing like the real thing.

My guess is there is something there that the script is outputting
that is not HTML, therefore, the browser is coming up with the
message.

Nothing but HTML; not even JavaScript.

Provide a URL.

You might also want to check what content type the server is sending.
Make sure that it is text/html. If you are trying to serve
content-type: application/xhtml+xml IE does not know how to render it
correctly and will throw an error.
I declared the content type with a meta tag.

Server content type overrides the META element.

I found this though it doesn't seem to apply:

How to Disable Active Content in Internet Explorer
http://support.microsoft.com/kb/154036

In part it states:

Customizing Safety Levels for Active Content

While most active content contained in Web pages is safe, some Web
pages contain active content that can potentially cause security
problems on your computer. For example, an ActiveX control that runs
automatically when you load a particular Web page might damage your
data or cause your computer to become infected with a virus. Internet
Explorer uses safety levels for active content to help prevent this
situation from occurring.

If you change the settings to allow everything, does your application work
correctly? If so, there _is_ something there other than HTML or the server
is sending an incorrect content type.

I suggest you view the page in Firefox with the Developer extensions
enabled, and view Response Headers.

--
Adrienne Boswell
http://www.cavalcade-of-coding.info
Please respond to the group so others can share

Jul 22 '05 #7

McKirahan

Thanks for your continued interest.

"Adrienne" <ar********@sbc global.net> wrote in message
news:Xn******** *************** *****@207.115.6 3.158...

Gazing into my crystal ball I observed "McKirahan" <Ne**@McKirahan .com>
writing in news:y7******** ************@co mcast.com:
"Adrienne" <ar********@sbc global.net> wrote in message
news:Xn******** *************** *****@207.115.6 3.158...

[snip]

Thanks anyway...
The style block looks good, no errors. If I were you, I would put the
style information in an external sheet. Don't use fixed font sizes
the user cannot resize, use ems or percentages (percantages are better
because IE has issues with ems), and the size you have declared may be
too small for some users. Also, the native behavior of the TH element
is to center bold, so font-weight:bold is redundant.
This page has a single user as it's part of an application.

And only one user uses the application?

Yes.
Be aware if you ever want to port
this to an application that will be on the WWW you need to address this
issue.

Do you have a URL? It would be helpful to see the real source.
I posted a subset of the real source; "..." was subsitiuted in places.

It would still be good to see the source. Although you have substituted
... there's nothing like the real thing.
My guess is there is something there that the script is outputting
that is not HTML, therefore, the browser is coming up with the
message.

Nothing but HTML; not even JavaScript.

Provide a URL.

You might also want to check what content type the server is sending.
Make sure that it is text/html. If you are trying to serve
content-type: application/xhtml+xml IE does not know how to render it
correctly and will throw an error.

I declared the content type with a meta tag.

Server content type overrides the META element.

I found this though it doesn't seem to apply:

How to Disable Active Content in Internet Explorer
http://support.microsoft.com/kb/154036

In part it states:

Customizing Safety Levels for Active Content

While most active content contained in Web pages is safe, some Web
pages contain active content that can potentially cause security
problems on your computer. For example, an ActiveX control that runs
automatically when you load a particular Web page might damage your
data or cause your computer to become infected with a virus. Internet
Explorer uses safety levels for active content to help prevent this
situation from occurring.

If you change the settings to allow everything, does your application work
correctly? If so, there _is_ something there other than HTML or the server
is sending an incorrect content type.

I suggest you view the page in Firefox with the Developer extensions
enabled, and view Response Headers.

This page is part of an HTML Application. The HTA generates a .htm page
(opened using "InternetExplor er.Application" ) with a form; when the page
is loaded JavaScript is used to submit the form whose action is the .asp
page.

The ASP page processes the form which updates a database then displays
a report of what it did. The database gets updated and the page tries to
load but is halted when the message in the Information Bar appears.
--
Adrienne Boswell
http://www.cavalcade-of-coding.info
Please respond to the group so others can share

I'm going to try "Mark of the Web" as alternative to changing IE6 settings.

Jul 22 '05 #8

Similar topics

1444

[ASL] the Active Schema Language : a new schema technology

by: Philippe Poulard | last post by:

People familiar with DTD, Relax NG, W3C XML Schema, Schematron, and that are aware of more recent works such as DSDL should recognize all of them in the Active Schema Language. Anyway, ASL differs slightly because it allows to switch from a content model to another with any arbitrary complex condition that can't be expressed usually in grammar based model for example ; another difference is that ASL allows to compute content model...

.NET Framework

3388

IE blocking active content

by: Emmett | last post by:

I have a simple jacascript that randomizes the background of the top frame of my webpage http://www.duke.edu/~efn. For some reason, my Internet Explorer started blocking the background and displaying this instead: http://www.duke.edu/~efn/pic.jpg. This problem didn't used to occur, and it doesn't happen on Firefox. Is there some way I can alter the script of the top frame http://www.duke.edu/~efn/top.html to prevent this from happening?...

Javascript

2229

Active Documnet Server Support

by: Kevin | last post by:

Is it possible to develop an Active Document Full Server or a Container application using C#? Thanks, Kevin.

C# / C Sharp

4754

Problem querying LDAP and/or Active Directory

by: Andrew | last post by:

Hey all, Working on revamping our Intranet here and making use of the LDPA, Active Directory, Directory Services, etc. that .Net provides. I am still fairly new on this subject, so the problem I have run into I am not sure how to fix, and really not sure what is causing it. Here's what is going on (test server - Windows 2003 Server): I have a page in a folder (under anonymous authentication in IIS6) that has a link on it that...

ASP.NET

3177

"Sudden" Active Directory error on ASP.NET

by: Patrick | last post by:

I have an ASP.NET page that searches for someone in the corporate Active Directory. It had been working fine until recently when I changed from Basic Authentication on IIS6 back to Integrated Windows authentication. The error occurs on the FindAll method. The exceptions are as follows. anyway of getting the code working with Integrated Windows authentication (too annoying for user to enter user-name/password). Note I do need to use...

ASP.NET

1323

Simple Active-X, how-to

by: Morten Snedker | last post by:

Just for the sake of learning, I'm trying to make a simple Active-X in VB.NET. It should contain the MonthCalendar control, a date should be picked, and the Active-X control would return the date to the application using it. I've dropped the MonthCalendar on a form (using Windows Control Library - is this the right one?). And then what?

Visual Basic .NET

1235

Active Up expands ever popular product line

by: fblake | last post by:

FOR IMMEDIATE RELEASE Active Up expands ever popular product line Active Web.Controls 2007 V1, Active Cells V2 and Active AutoSuggest V1.0 Belgium (February 2007): Active Up today released the latest version of their .NET web control suite, Active Web.Controls 2007 V1, their excel compatible component Active Cells V2 and a new text suggestion component Active Auto Suggest V1.0

.NET Framework

2504

Web page to enumerate groups in active directory

by: bcanter | last post by:

I found a file on the web that will allow you to enumerate groups but it was an .hta and the top level admins won't allow this. I need to give managers access to the groups so that when a new user is created they can tell me who they want their account to be modeled after. The html app works great as a .hta file but when it is saved as a web page it won't list the members of any groups. I get an error on line 182: "ActiveX component can't create...

Visual Basic 4 / 5 / 6

1419

Active content in popup window

by: starfoxsb | last post by:

Hi all, I have web pages with "active content" running locally on my PC in Internet Explorer. These pages open other windows by "window.open()" and these windows have, in their turn, active content. As IE does not let any active content run in web pages that run locally, I have to "Allow Blocked Content" both for my main page and for the window opened. It's not nice, but it works...

Javascript

8946

What is ONU?

by: marktang | last post by:

ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...

General

8774

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...

Windows Server

9307

Maximizing Business Potential: The Nexus of Website Design and Digital Marketing

by: jinu1996 | last post by:

In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...

Online Marketing

9235

The easy way to turn off automatic updates for Windows 10/11

by: Hystou | last post by:

Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...

Windows Server

8186

AI Job Threat for Devs

by: agi2029 | last post by:

Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...

Career Advice

6735

Access Europe - Using VBA to create a class based on a table - Wed 1 May

by: isladogs | last post by:

The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...

Microsoft Access / VBA

6031

Couldn’t get equations in html when convert word .docx file to html file in C#.

by: conductexam | last post by:

I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...

C# / C Sharp

2721

How to add payments to a PHP MySQL app.

by: muto222 | last post by:

How can i add a mobile payment intergratation into php mysql website.

PHP

2180

Comprehensive Guide to Website Development in Toronto: Expert Insights from BSMN Consultancy

by: bsmnconsultancy | last post by:

In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

General