October, 2007

There have been a number of blog posts recently about JavaScript developments, e.g. Gabriele Renzi’s " ECMAScript 4, the fourth system syndrome ". For ECMAScript, we here on the IE team certainly believe that thoughtful evolution is the right way to go; as I've frequently spoken about publicly, compatibility with the current web ecosystem - not "breaking the Web" - is something we take very seriously. In our opinion, a revolution in ECMAScript would be best done with an entirely new language, so...

Investigating URI parsing related issues in various products, I’ve run across many instances of code erroneously attempting to compare two URIs for equality. In some cases the author writes their own comparison and seems to be unaware of URI semantics and in other cases the author delegates to a Windows provided function that doesn’t quite work for the author’s scenario. In this blog post I’ll describe some of the unmanaged URI comparison functions available to Win32 developers, and a few common...

The IE Cumulative Security Update for October 2007 is now available via Windows Update . Alternatively, you can receive this and all other Microsoft updates via the new Microsoft Update . I encourage you to upgrade to Microsoft Update if you haven’t already to ensure that you receive the latest updates for all Microsoft products. This update addresses 1 remote code execution and 3 spoofing vulnerabilities. This bulletin also includes killbits for some vulnerable ActiveX controls. For detailed...

Almost a year ago, we released Internet Explorer 7 for Windows XP. Since then, IE7 is well on its way to becoming the most used browser in the world, and we’ve seen lots of evidence that IE7 makes it safer and easier to accomplish everyday tasks online. For example, the built-in Phishing Filter has protected consumers from known phishing web sites an average of 900,000 times per week. IE7 is the first – and still the only – browser with native support for Extended Validation SSL Certificates that...