PRB: Cab Files Signed Low in VJ++ Request Full IE Permissions

SYMPTOMS

When you sign a cabinet file (.cab) with Low permissions in Visual J++ and
you open the Web page that calls the cabinet file, Internet Explorer
displays a message that the component is signed with Full permissions.

CAUSE

When you sign a cabinet file with Low permissions in Visual J++, you are
requesting that the code in the cabinet be fully trusted on the user's
system. That is, you are essentially requesting the user to lower his or
her Internet Explorer security level to Low to grant full access to the
component. Only a security zone already set to the Low security level in
Internet Explorer can grant this much access without first asking the
user.
Otherwise, Internet Explorer displays a message stating that the component
is signed with Full permissions (that is, full access). The user has to
click Yes to continue loading the specific code contained in the cabinet
file.

RESOLUTION

This behavior is by design.

MORE INFORMATION

Details concerning cabinet file permission levels, Internet Explorer
security zones, and how signed cabinet file permission levels act in the
various Internet Explorer security zone settings, are outlined in detail
in
the Microsoft SDK for Java
documentation. For more information, visit the following Microsoft Web site:IMPORTANT NOTE: In Internet Explorer, set your security level to Low only
when you are certain that all content you might encounter in the specific
zone is from a safe source (for example, your corporate intranet). In
addition, when you run a component that is signed with Full permissions
from a security zone that is not set as Low, make sure that you are
certain
it does not contain unsecure content.

REFERENCES

For support information about Visual J++ and the SDK for Java, visit the following Microsoft Web site:


(c) Microsoft Corporation 1998, All Rights Reserved. Contributions by Brett Siedman, Microsoft Corporation.

Propiedades

Id. de artículo: 197573 - Última revisión: 02/14/2017 - Revisión: 1

Microsoft Visual J++ 6.0 Edición estándar

Comentarios