IE8 "Data Execution Prevention" error thrown when setting hidden field value

[Frinavale]

I've been trying to test my web application using Internet Explorer 8 (release candidate 1) and have been experiencing some major problems. I'm hoping you can help me with this one.

I have a JavaScript Object that tracks the horizontal scroll position of a <div> element on the page. It sets a hidden field so that when the page is submitted to the server, the server code is able to retrieve the current scroll position. When the page is sent back to the browser, the server side code initializes the JavaScript Object with the scroll position retained.

This has all been working for quite some time now....but with the new IE8 RC1 I'm getting a Data Execution Prevention error message. It's displayed in a prompt informing me that:

Data Execution Prevention helps protect against damage from viruses and other security threats.

When I hit the "close message" button in this prompt IE8 proceeds to crash.

This message appears when I am storing the scroll position of the <div> in the hidden field used to relay the scroll position to the server:

    _onScroll: function() {
//this.get_element retrieves the <div> element
        if (this.get_element()) {
            this._LeftScrollPosition = this.get_element().scrollLeft;
//scrollPositionMessenger is the hidden field that relays the scroll position to the server
            var scrollPositionMessenger = document.getElementById(this._ScrollPositionMessengerName);
            if(scrollPositionMessenger != null)
            {
//Error thrown here
            scrollPositionMessenger.value=this._LeftScrollPosition;
            }
 
        }

Does anyone know how to get around this problem?

Thanks for your time,

-Frinny

[Frinavale]

So, way back, when I was just learning about Ajax (thanks to this forum actually)... I used the XMLHttpRequest' s open() and send() methods to preform an Ajax call to the server. I had completely forgotten about these methods because I've been using the .NET Ajax Framework for some time now.

The send method takes an optional parameter: the entity body.

Urg, I think I know how to do this, but it's going to be really nasty.

[Frinavale]

Thanks Acoder!

I have a solution to the problem. (I think) It involved modifying the parameter being set to the send() method by the .NET Ajax Framework.

In order to do this I had to implement a method that is executed during the PageRequestMana ger's initializeReque st event.

This method is passed 2 parameters: the sender, and the event arguments for the event.

The event arguments parameter is an InitializeReque stEventArgs Object. This object has a property that lets you retrieve the "request" Object.

The request object contains the body of the request which (I'm assuming) is sent as a parameter to the send() method. I was able to retrieve the body, modify the value for the hidden field in the body, and reset the request object's body with the changes.


Thanks a lot Acoder.

If it wasn't for you I would never have attempted any of this.

-Frinny

[acoder]

I'm glad you got it working in the end. I don't know if this would be possible with ASP.NET Ajax, but I would've taken my first suggestion for an easier and simpler solution, i.e. set the hidden field just before the Ajax call.

[Frinavale]

I was setting it before the Ajax call. I was setting it in the "onscroll" event....howeve r, this was crashing IE8. There may be another way to do this, but after days of trying to find a solution, I couldn't find one. The initializeReque st event was the only event that that I could use which occurred before the Ajax call...and at that point the request object is already created...so I had no choice but to edit the request body before the Ajax call is made.

[acoder]

If that is indeed the case, then I'd consider it to be a flaw, i.e. that you can't call a function or add some code before an Ajax call.