Re: <!-- saved from url=(0014)about:internet --> vs



(reposted with corrected Author)


G Doucet wrote:
Third, I found that my IE6 will show that popup message on
local files (for some reason) but I also found that I could add
the following to the top of my html file as a workaround
<!-- saved from url=(0014)about:internet --> to apparently
get Internet Explorer to think it's a file from the Internet?


This is the poorly known and generally misunderstood "Mark Of The Web",
or MOTW. It adjusts the operation of the "Local Machine Lockdown"
feature that was added in Windows XP SP2.

Quoting from elsewhere: "The role of the MOTW is more prominent with
IE6 for Windows XP SP2 because of increased security restrictions in
the Local Machine zone. When you are developing Web content, the MOTW
enables you to test your active HTML documents in the security zone
where you intend the pages to run, instead of in the increased security
restrictions of the Local Machine zone."


In short, with IE6 on XP SP2, local files are subjected, by default, to
*more* security restrictions (not *less*) that remote files. By adding
the MOTW, you tell IE6 to treat those files like remote files when
deciding what restrictions to apply to them.


HTH
TC (MVP MSAccess)
http://tc2.atspace.com

.



Relevant Pages

  • Re: vs
    ... the following to the top of my html file as a workaround ... or MOTW. ... the Local Machine zone. ... where you intend the pages to run, instead of in the increased security ...
    (alt.html)
  • Re: vs
    ... You'll see that *IE itself* has added the MOTW. ... security risk of attackers trying to exploit the Local Machine zone and its looser restrictions to access my computer, ... Explorer 6 for Windows XP SP2 "locks down" the Local Machine zone. ... Internet Explorer 6 for Windows XP SP2, the local zone is lock down. ...
    (alt.html)
  • Re: vs
    ... including the MOTW does not /elevate/ the page's priviliges (ie. ... Indeed, as I have shown, IE will actually add the mark for him! ... in the Internet Zone, could include an MOTW that asked for that page to ... *not* serve to elevate the untrusted page's security zone. ...
    (alt.html)