Active Content?

McKirahan

What is "active content"? My ASP page just returns HTML....
I have a page with an .htm extension that has a form whose action
is an ASP page which generates a report after updating a database
with the form data.

Under Windowx XP SP2 the IE6 "Information Bar" has the message:

"To help protect your security, Internet Explorer has restricted this
file from showing active content that could access your computer."

Jul 22 '05 #1

Subscribe Post Reply

1938

Curt_C [MVP]

Whats the code look like? Mostly likely some clientside events are getting
triggered that are being interpreted as malicious

--
Curt Christianson
Site & Scripts: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"McKirahan" <Ne**@McKirahan.com> wrote in message
news:zL********************@comcast.com...

What is "active content"? My ASP page just returns HTML....
I have a page with an .htm extension that has a form whose action
is an ASP page which generates a report after updating a database
with the form data.

Under Windowx XP SP2 the IE6 "Information Bar" has the message:

"To help protect your security, Internet Explorer has restricted this
file from showing active content that could access your computer."

Jul 22 '05 #2

McKirahan

"Curt_C [MVP]" <software_AT_darkfalz.com> wrote in message
news:#w**************@TK2MSFTNGP09.phx.gbl...

Whats the code look like? Mostly likely some clientside events are getting
triggered that are being interpreted as malicious

--
Curt Christianson
Site & Scripts: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"McKirahan" <Ne**@McKirahan.com> wrote in message
news:zL********************@comcast.com...
What is "active content"? My ASP page just returns HTML....
I have a page with an .htm extension that has a form whose action
is an ASP page which generates a report after updating a database
with the form data.

Under Windowx XP SP2 the IE6 "Information Bar" has the message:

"To help protect your security, Internet Explorer has restricted this
file from showing active content that could access your computer."

Thanks for your reply. As I said, it returns just HTML:

<html>
<head>
<title>...</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<meta name="title" content="...">
<meta name="description" content="...">
<meta name="keywords" content="...">
<meta name="author" content="...">
<style type="text/css">
td { font-family:Arial; font-size:8pt }
th { font-family:Arial; font-size:8pt; font-weight:bold }
..data { font-family:Arial; font-size:7pt; cursor:pointer; cursor:hand }
..hand { cursor:pointer; cursor:hand }
..head { font-family:Arial; font-size:9pt; font-weight:bold }
..lane { border-bottom:1px solid black }
..line { border:1px solid black }
..page { page-break-before:always }
</style>
</head>
<body>
<table border="0" cellpadding="0" cellspacing="0" width="709">
<tr>
<th align="left" class="head">...</th>
<th class="head">
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddle">
  ...  
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddle">
</th>
<th align="right" class="head">...</th>
</tr>
</table>
<br>
<table border="0" cellpadding="0" cellspacing="0" width="709" class="line">
<tr>
<th class="lane" width="118" align="left">...</th>
<th class="lane" width="60">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="120">...</th>
</tr>

</table>
<div class="page"></div>
</body>
</html>

Jul 22 '05 #3

Mark Schupp

"McKirahan" <Ne**@McKirahan.com> wrote in message
news:X9********************@comcast.com...

"Curt_C [MVP]" <software_AT_darkfalz.com> wrote in message
news:#w**************@TK2MSFTNGP09.phx.gbl...
Whats the code look like? Mostly likely some clientside events are
getting
triggered that are being interpreted as malicious

--
Curt Christianson
Site & Scripts: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"McKirahan" <Ne**@McKirahan.com> wrote in message
news:zL********************@comcast.com...
> What is "active content"? My ASP page just returns HTML....
>
>
> I have a page with an .htm extension that has a form whose action
> is an ASP page which generates a report after updating a database
> with the form data.
>
> Under Windowx XP SP2 the IE6 "Information Bar" has the message:
>
> "To help protect your security, Internet Explorer has restricted this
> file from showing active content that could access your computer."
>

Thanks for your reply. As I said, it returns just HTML:

<html>
<head>
<title>...</title>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<meta name="title" content="...">
<meta name="description" content="...">
<meta name="keywords" content="...">
<meta name="author" content="...">
<style type="text/css">
td { font-family:Arial; font-size:8pt }
th { font-family:Arial; font-size:8pt; font-weight:bold }
.data { font-family:Arial; font-size:7pt; cursor:pointer; cursor:hand }
.hand { cursor:pointer; cursor:hand }
.head { font-family:Arial; font-size:9pt; font-weight:bold }
.lane { border-bottom:1px solid black }
.line { border:1px solid black }
.page { page-break-before:always }
</style>
</head>
<body>
<table border="0" cellpadding="0" cellspacing="0" width="709">
<tr>
<th align="left" class="head">...</th>
<th class="head">
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddle">
  ...  
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddle">
</th>
<th align="right" class="head">...</th>
</tr>
</table>
<br>
<table border="0" cellpadding="0" cellspacing="0" width="709"
class="line">
<tr>
<th class="lane" width="118" align="left">...</th>
<th class="lane" width="60">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="120">...</th>
</tr>

</table>
<div class="page"></div>
</body>
</html>

don't see anything obvious (unless there is something in the "..." areas
that you left out). try stripping out code until the message goes away
(start with the style block, it has the most unusual code).

--
--Mark Schupp

Jul 22 '05 #4

Adrienne

Gazing into my crystal ball I observed "Mark Schupp" <no******@email.net>
writing in news:ON*************@tk2msftngp13.phx.gbl:

"McKirahan" <Ne**@McKirahan.com> wrote in message
news:X9********************@comcast.com...
"Curt_C [MVP]" <software_AT_darkfalz.com> wrote in message
news:#w**************@TK2MSFTNGP09.phx.gbl...
Whats the code look like? Mostly likely some clientside events are
getting triggered that are being interpreted as malicious

--
Curt Christianson
Site & Scripts: http://www.Darkfalz.com
Blog: http://blog.Darkfalz.com
"McKirahan" <Ne**@McKirahan.com> wrote in message
news:zL********************@comcast.com...
> What is "active content"? My ASP page just returns HTML....
>
>
> I have a page with an .htm extension that has a form whose action
> is an ASP page which generates a report after updating a database
> with the form data.
>
> Under Windowx XP SP2 the IE6 "Information Bar" has the message:
>
> "To help protect your security, Internet Explorer has restricted
> this file from showing active content that could access your
> computer."
>

Thanks for your reply. As I said, it returns just HTML:

<html>
<head>
<title>...</title>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252"> <meta name="title" content="...">
<meta name="description" content="...">
<meta name="keywords" content="...">
<meta name="author" content="...">
<style type="text/css">
td { font-family:Arial; font-size:8pt }
th { font-family:Arial; font-size:8pt; font-weight:bold }
.data { font-family:Arial; font-size:7pt; cursor:pointer; cursor:hand
} .hand { cursor:pointer; cursor:hand }
.head { font-family:Arial; font-size:9pt; font-weight:bold }
.lane { border-bottom:1px solid black }
.line { border:1px solid black }
.page { page-break-before:always } </style> </head> <body>
<table border="0" cellpadding="0" cellspacing="0" width="709"> <tr>
<th align="left" class="head">...</th>
<th class="head">
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddle">
  ...  
<img src="images/...gif" border="0" width="24" height="12" alt=""
class="line" align="absmiddle"> </th>
<th align="right" class="head">...</th> </tr> </table> <br>
<table border="0" cellpadding="0" cellspacing="0" width="709"
class="line"> <tr>
<th class="lane" width="118" align="left">...</th>
<th class="lane" width="60">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="35">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="40">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="30">...</th>
<th class="lane" width="120">...</th> </tr>
 </table>
<div class="page"></div> </body> </html>

don't see anything obvious (unless there is something in the "..."
areas that you left out). try stripping out code until the message goes
away (start with the style block, it has the most unusual code).

The style block looks good, no errors. If I were you, I would put the
style information in an external sheet. Don't use fixed font sizes the
user cannot resize, use ems or percentages (percantages are better because
IE has issues with ems), and the size you have declared may be too small
for some users. Also, the native behavior of the TH element is to center
bold, so font-weight:bold is redundant.

Do you have a URL? It would be helpful to see the real source.

My guess is there is something there that the script is outputting that is
not HTML, therefore, the browser is coming up with the message.

You might also want to check what content type the server is sending. Make
sure that it is text/html. If you are trying to serve content-type:
application/xhtml+xml IE does not know how to render it correctly and will
throw an error.

--
Adrienne Boswell
http://www.cavalcade-of-coding.info
Please respond to the group so others can share

Jul 22 '05 #5

McKirahan

"Adrienne" <ar********@sbcglobal.net> wrote in message
news:Xn****************************@207.115.63.158 ...

[snip]

Thanks anyway...

The style block looks good, no errors. If I were you, I would put the
style information in an external sheet. Don't use fixed font sizes the
user cannot resize, use ems or percentages (percantages are better because
IE has issues with ems), and the size you have declared may be too small
for some users. Also, the native behavior of the TH element is to center
bold, so font-weight:bold is redundant.
This page has a single user as it's part of an application.

Do you have a URL? It would be helpful to see the real source.
I posted a subset of the real source; "..." was subsitiuted in places.
My guess is there is something there that the script is outputting that is
not HTML, therefore, the browser is coming up with the message.
Nothing but HTML; not even JavaScript.

You might also want to check what content type the server is sending. Make sure that it is text/html. If you are trying to serve content-type:
application/xhtml+xml IE does not know how to render it correctly and will
throw an error.
I declared the content type with a meta tag.
--
Adrienne Boswell
http://www.cavalcade-of-coding.info
Please respond to the group so others can share

I found this though it doesn't seem to apply:

How to Disable Active Content in Internet Explorer
http://support.microsoft.com/kb/154036

In part it states:

Customizing Safety Levels for Active Content

While most active content contained in Web pages is safe, some Web pages
contain active content that can potentially cause security problems on your
computer. For example, an ActiveX control that runs automatically when you
load a particular Web page might damage your data or cause your computer to
become infected with a virus. Internet Explorer uses safety levels for
active content to help prevent this situation from occurring.

Jul 22 '05 #6

Adrienne

Gazing into my crystal ball I observed "McKirahan" <Ne**@McKirahan.com>
writing in news:y7********************@comcast.com:

"Adrienne" <ar********@sbcglobal.net> wrote in message
news:Xn****************************@207.115.63.158 ...

[snip]

Thanks anyway...
The style block looks good, no errors. If I were you, I would put the
style information in an external sheet. Don't use fixed font sizes
the user cannot resize, use ems or percentages (percantages are better
because IE has issues with ems), and the size you have declared may be
too small for some users. Also, the native behavior of the TH element
is to center bold, so font-weight:bold is redundant.
This page has a single user as it's part of an application.

And only one user uses the application? Be aware if you ever want to port
this to an application that will be on the WWW you need to address this
issue.

Do you have a URL? It would be helpful to see the real source.
I posted a subset of the real source; "..." was subsitiuted in places.

It would still be good to see the source. Although you have substituted
.... there's nothing like the real thing.

My guess is there is something there that the script is outputting
that is not HTML, therefore, the browser is coming up with the
message.

Nothing but HTML; not even JavaScript.

Provide a URL.

You might also want to check what content type the server is sending.
Make sure that it is text/html. If you are trying to serve
content-type: application/xhtml+xml IE does not know how to render it
correctly and will throw an error.
I declared the content type with a meta tag.

Server content type overrides the META element.

I found this though it doesn't seem to apply:

How to Disable Active Content in Internet Explorer
http://support.microsoft.com/kb/154036

In part it states:

Customizing Safety Levels for Active Content

While most active content contained in Web pages is safe, some Web
pages contain active content that can potentially cause security
problems on your computer. For example, an ActiveX control that runs
automatically when you load a particular Web page might damage your
data or cause your computer to become infected with a virus. Internet
Explorer uses safety levels for active content to help prevent this
situation from occurring.

If you change the settings to allow everything, does your application work
correctly? If so, there _is_ something there other than HTML or the server
is sending an incorrect content type.

I suggest you view the page in Firefox with the Developer extensions
enabled, and view Response Headers.

--
Adrienne Boswell
http://www.cavalcade-of-coding.info
Please respond to the group so others can share

Jul 22 '05 #7

McKirahan

Thanks for your continued interest.

"Adrienne" <ar********@sbcglobal.net> wrote in message
news:Xn****************************@207.115.63.158 ...

Gazing into my crystal ball I observed "McKirahan" <Ne**@McKirahan.com>
writing in news:y7********************@comcast.com:
"Adrienne" <ar********@sbcglobal.net> wrote in message
news:Xn****************************@207.115.63.158 ...

[snip]

Thanks anyway...
The style block looks good, no errors. If I were you, I would put the
style information in an external sheet. Don't use fixed font sizes
the user cannot resize, use ems or percentages (percantages are better
because IE has issues with ems), and the size you have declared may be
too small for some users. Also, the native behavior of the TH element
is to center bold, so font-weight:bold is redundant.
This page has a single user as it's part of an application.

And only one user uses the application?

Yes.
Be aware if you ever want to port
this to an application that will be on the WWW you need to address this
issue.

Do you have a URL? It would be helpful to see the real source.
I posted a subset of the real source; "..." was subsitiuted in places.

It would still be good to see the source. Although you have substituted
... there's nothing like the real thing.
My guess is there is something there that the script is outputting
that is not HTML, therefore, the browser is coming up with the
message.

Nothing but HTML; not even JavaScript.

Provide a URL.

You might also want to check what content type the server is sending.
Make sure that it is text/html. If you are trying to serve
content-type: application/xhtml+xml IE does not know how to render it
correctly and will throw an error.

I declared the content type with a meta tag.

Server content type overrides the META element.

I found this though it doesn't seem to apply:

How to Disable Active Content in Internet Explorer
http://support.microsoft.com/kb/154036

In part it states:

Customizing Safety Levels for Active Content

While most active content contained in Web pages is safe, some Web
pages contain active content that can potentially cause security
problems on your computer. For example, an ActiveX control that runs
automatically when you load a particular Web page might damage your
data or cause your computer to become infected with a virus. Internet
Explorer uses safety levels for active content to help prevent this
situation from occurring.

If you change the settings to allow everything, does your application work
correctly? If so, there _is_ something there other than HTML or the server
is sending an incorrect content type.

I suggest you view the page in Firefox with the Developer extensions
enabled, and view Response Headers.

This page is part of an HTML Application. The HTA generates a .htm page
(opened using "InternetExplorer.Application") with a form; when the page
is loaded JavaScript is used to submit the form whose action is the .asp
page.

The ASP page processes the form which updates a database then displays
a report of what it did. The database gets updated and the page tries to
load but is halted when the message in the Information Bar appears.
--
Adrienne Boswell
http://www.cavalcade-of-coding.info
Please respond to the group so others can share

I'm going to try "Mark of the Web" as alternative to changing IE6 settings.

Jul 22 '05 #8

by: Philippe Poulard | last post by:

People familiar with DTD, Relax NG, W3C XML Schema, Schematron, and that are aware of more recent works such as DSDL should recognize all of them in the Active Schema Language. Anyway, ASL...

.NET Framework

IE blocking active content

by: Emmett | last post by:

I have a simple jacascript that randomizes the background of the top frame of my webpage http://www.duke.edu/~efn. For some reason, my Internet Explorer started blocking the background and...

Javascript

Active Documnet Server Support

by: Kevin | last post by:

Is it possible to develop an Active Document Full Server or a Container application using C#? Thanks, Kevin.

C# / C Sharp

Problem querying LDAP and/or Active Directory

by: Andrew | last post by:

Hey all, Working on revamping our Intranet here and making use of the LDPA, Active Directory, Directory Services, etc. that .Net provides. I am still fairly new on this subject, so the problem...

ASP.NET

"Sudden" Active Directory error on ASP.NET

by: Patrick | last post by:

I have an ASP.NET page that searches for someone in the corporate Active Directory. It had been working fine until recently when I changed from Basic Authentication on IIS6 back to Integrated...

ASP.NET

Simple Active-X, how-to

by: Morten Snedker | last post by:

Just for the sake of learning, I'm trying to make a simple Active-X in VB.NET. It should contain the MonthCalendar control, a date should be picked, and the Active-X control would return the...

Visual Basic .NET

Active Up expands ever popular product line

by: fblake | last post by:

FOR IMMEDIATE RELEASE Active Up expands ever popular product line Active Web.Controls 2007 V1, Active Cells V2 and Active AutoSuggest V1.0 Belgium (February 2007): Active Up today released...

.NET Framework

Web page to enumerate groups in active directory

by: bcanter | last post by:

I found a file on the web that will allow you to enumerate groups but it was an .hta and the top level admins won't allow this. I need to give managers access to the groups so that when a new user is...

Visual Basic 4 / 5 / 6

Active content in popup window

by: starfoxsb | last post by:

Hi all, I have web pages with "active content" running locally on my PC in Internet Explorer. These pages open other windows by "window.open()" and these windows have, in their turn, active...

Javascript

How to turn on java script in a villaon keypad mobile phone

by: Charles Arthur | last post by:

How do i turn on java script on a villaon, callus and itel keypad mobile phone

Java

Merging data from multiple Excel files

by: ryjfgjl | last post by:

In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...

Data Management

Migrating Website to Cloud - Emmanuel Katto

by: emmanuelkatto | last post by:

Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel

General

Navigating the Data Structures and Algorithms (DSA)

by: BarryA | last post by:

What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...

Algorithms / Advanced Math

Is that possible of reading the .csv file in column wise and the column have different lengths ?

by: Sonnysonu | last post by:

This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...

C / C++

How to build RAID in BIOS?

by: Hystou | last post by:

There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...

Computer Hardware

Changing the language in Windows 10

by: Hystou | last post by:

Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...

Windows Server

Problem With Comparison Operator <=> in G++

by: Oralloy | last post by:

Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...

C / C++

Discussion: How does Zigbee compare with other wireless protocols in smart home applications?

by: tracyyun | last post by:

Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...

General

Similar topics