How to Prevent Web Sites From Obtaining Access to the Contents of Your Windows Clipboard

Article ID: 224993 - View products that this article applies to.
This article was previously published under Q224993
Expand all | Collapse all

On This Page

SUMMARY

Internet Explorer includes customizable security settings to help to prevent malicious Web site administrators that script the Microsoft Dynamic HTML (DHTML) Editing Component from obtaining access to your Windows clipboard data. By default, the High security level enables this protection in Internet Explorer 5 and later. By default, Internet Explorer 6 and some versions of Internet Explorer 5 use the High security level for the Restricted sites security zone. By default, Windows Server 2003 uses the High security level for both the Internet and Restricted sites security zones. This article describes how to help to prevent Web sites in the Internet, Local intranet, or Trusted sites zones from obtaining access to your Windows clipboard data by scripting the DHTML Editing Component.
Back to the top | Give Feedback

MORE INFORMATION

Internet Explorer 5 includes the Microsoft DHTML Editing Component. In Internet Explorer 4, the component is available as a downloadable ActiveX control. Web authors and program developers can use the component to add HTML editing capabilities to their Web sites and programs. The editing component uses the Component Object Model (COM) technology by Microsoft to make editing services available, such as basic HTML formatting, tables, undo or redo, find, and absolute positioning.

To help to prevent Web sites in the Internet, Local intranet, or Trusted sites zones from obtaining access to your Windows clipboard data by scripting the DHTML Editing Component with Internet Explorer 5 or 6, change the appropriate zone security level to High or use a Custom level. To use a Custom level, use the appropriate method for your version of Internet Explorer.

Internet Explorer 5 and 6

  1. In Control Panel, click Internet Options.
  2. Click the Security tab.
  3. Under Select a Web content zone to specify its security settings, click the zone where you want to prevent Web sites from accessing your clipboard.
  4. Click Custom Level.
  5. In the Scripting section, under Allow paste operations via script, click Prompt or Disable.
  6. Click OK.
Note If you turn on the "Allow paste operations via script" feature, you receive the following security alert whenever a Web site tries to access to your Windows clipboard by using the DHTML Editing Component:
Internet Explorer
Do you want to allow this page to paste information from your clipboard?
Administrators can also adjust the default setting for this feature by using Group Policy or the Internet Explorer Administration Kit (IEAK).

Internet Explorer 4

If you have installed the DHTML Editing Component for Internet Explorer 4, you can help to prevent Web sites from viewing your clipboard data by selecting Prompt or Disable for Script ActiveX controls marked safe for scripting in the security settings for the appropriate zone. However, if you turn off this feature, Internet or intranet sites that use ActiveX controls may not work as expected. You can help to prevent Web sites in the Internet, Local intranet, or Trusted sites zones from obtaining access to your Windows clipboard data by scripting the DHTML Editing Component with Internet Explorer 4. To do so, use a Custom level for security:
  1. In Control Panel, click Internet Options.
  2. Click the Security tab.
  3. Under Select a Web content zone to specify its security settings, click the zone where you want to prevent Web sites from accessing your clipboard.
  4. Click Custom, and then click Settings.
  5. Click Prompt or Disable for Script ActiveX controls marked safe for scripting, and then click OK.
Back to the top | Give Feedback

Properties

Article ID: 224993 - Last Review: March 27, 2007 - Revision: 5.6
APPLIES TO
  • Microsoft Internet Explorer 6.0, when used with:
    • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
    • the operating system: Microsoft Windows XP
    • the operating system: Microsoft Windows 2000
    • Microsoft Windows NT 4.0 Service Pack 6
    • Microsoft Windows Millennium Edition
    • Microsoft Windows 98 Second Edition
    • Microsoft Windows 98 Standard Edition
  • Microsoft Internet Explorer 5.5, when used with:
    • the operating system: Microsoft Windows 2000
    • Microsoft Windows NT 4.0
    • Microsoft Windows Millennium Edition
    • Microsoft Windows 98 Second Edition
    • Microsoft Windows 98 Standard Edition
    • Microsoft Windows 95
  • Microsoft Internet Explorer 5.01, when used with:
    • the operating system: Microsoft Windows 2000
    • Microsoft Windows NT 4.0
    • Microsoft Windows 98 Second Edition
    • Microsoft Windows 98 Standard Edition
    • Microsoft Windows 95
  • Microsoft Internet Explorer 5.0, when used with:
    • Microsoft Windows NT 4.0
    • Microsoft Windows 98 Second Edition
    • Microsoft Windows 98 Standard Edition
    • Microsoft Windows 95
  • Microsoft Internet Explorer 4.5 128-Bit Edition, when used with:
    • Microsoft Windows NT 4.0
    • Microsoft Windows 98 Standard Edition
    • Microsoft Windows 95
Keywords: 
kbhowto KB224993
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top