August, 2007

As a part of the August Cumulative Update for Internet Explorer , a small enhancement was made to Internet Explorer’s HTTP Cookie handling. This post describes that enhancement, and presents some other considerations for using cookies on your site. A knowledge base article referencing this change can be found here . Background In the past, IE’s cookie jar stored a maximum of 20 cookies per domain. If more than 20 cookies were sent by the server, older cookies were automatically dropped by the...

Hi everyone, In June I posted information about a number of developer tools , one of which was Ajax View. Ajax View, developed by Microsoft Research , can help improve a developer's visibility into their web application’s performance and behavior. Recently, the researchers building Ajax View – Emre Kıcıman and Ben Livshits – released a public version of the tool (licensed for academic or other non-commercial use) so I want to share a link and provide a little more information about it. What...

Just a quick blog post to let you know we’ve updated the IE6 (XP SP2) and the IE7 (XP SP2) VPC images that you can use with Virtual PC 2007 . You can find the images at http://www.microsoft.com/downloads/details.aspx?FamilyId=21EABB90-958F-4B64-B5F1-73D0A413C8EF&displaylang=en . From here, you can download either the IE6 image or the IE7 image. Both images are pretty much identical to the ones we published back in April, they contain all of the updates through last week, and any included tools...

The IE Cumulative Security Update for August 2007 is now available via Windows Update . Alternatively, you can receive this and all other Microsoft updates via the new Microsoft Update . I encourage you to upgrade to Microsoft Update if you haven’t already to ensure that you receive the latest updates for all Microsoft products. This update addresses 3 remote code execution vulnerabilities. This bulletin also includes killbits for some vulnerable third-party ActiveX controls. These have been set...

One of the most important activities we do in the software industry is service our customers through software updates. Like any other binary software, ActiveX controls often need to be updated with bug fixes and new functionality. So what is the best way to get updates to our customers? Steve, from our Silverlight team, and I were just chatting about good update practices for ActiveX controls, and we want to share them with you. Most of these practices are already in common use among ActiveX controls;...

A while ago I talked about Internet Explorer sessions we were giving at Tech-Ed 2007 . And while it was a great pleasure for me to see many of you there, not everyone could make it to Tech-Ed. Working with TechNet’s IT Showtime, we’ve made my presentation Windows Internet Explorer 7 Security In-Depth available to watch online, as well as a selection of other Tech-Ed presentations . A new feature of this year’s Virtual Tech-Ed was the FishBowl , which showcased 15 minute interviews with speakers...