Browse by Tags

• Aargh!
• bad jokes
• Metablogging
• Performance
• Scripting
• VBScript

• Aargh! Part Eight, plus Boring Metablogging

  Q: What's a pirate's second favourite mode of transportation? A: A caaaaargh! Preferably a Jaguaaaaargh, but an early Oldsmobile Cutlass will do. Q: Very amusing -- but what's a pirate's favourite mode of transportation? A: A pirate ship, silly. Gripe Read More... Posted Friday, July 23, 2004 11:51 AM by Eric Lippert | 9 Comments Filed under: Security, COM Programming, Performance, Aargh!, Metablogging, bad jokes

• Script And IE Security Part Eight: IDispatchEx

  Finally, we get to the last unexplained bit on the IObjectSafety interface. What's the "use dispex" flag for? I'll go into the rationale for the IDispatchEx interface in another entry. As far as its security impact goes, we had to solve certain scenarios Read More... Posted Friday, January 23, 2004 1:20 PM by Eric Lippert | 2 Comments Filed under: Scripting, Security, COM Programming

• Script And IE Security Part Seven: Other Stuff

  The only JScript functions which change their semantics when the security system is on are the ActiveXObject constructor and the GetObject method which we have already covered. VBScript has only four methods which are restricted or changed when the security Read More... Posted Thursday, January 22, 2004 10:20 AM by Eric Lippert | 1 Comments Filed under: VBScript, Scripting, Security, COM Programming

• Script In IE Security Part Six: Creating Objects With State

  Ideally the call to QueryCustomPolicy would take an argument representing the moniker for the persisted state so that this could be taken into account when the Security Manager made its decision whether or not to allow the persisted state to load. Unfortunately, Read More... Posted Wednesday, January 21, 2004 11:00 AM by Eric Lippert | 1 Comments Filed under: Scripting, Security, COM Programming

• Script In IE Security Part Five: Creating Objects With The IE Security Manager

  I spent the weekend falling down Whistler and Blackcomb mountains with slippery boards attached to each foot. I'm getting better at falling at least -- in all my wipeouts I managed to keep my skis on, which was a big improvement over last year's multiple Read More... Posted Tuesday, January 20, 2004 1:15 PM by Eric Lippert | 1 Comments Filed under: Scripting, Security, COM Programming

• Script And IE Security Part Four: Creating Objects Without The IE Security Manager

  Suppose for a moment that a non-IE script host has asked the script engine to be safe for untrusted data but has not turned on the "use Security Manager" bit. Suppose further the host passes in this data (from an untrustworthy and therefore potentially Read More... Posted Thursday, January 15, 2004 10:37 AM by Eric Lippert | 1 Comments Filed under: Scripting, Security, COM Programming

• Script And IE Security Part Three: Some Object Creation Techniques Are Explicitly Forbidden

  A couple readers have commented that yes, my conjecture that people will continue to use the twentieth-century COM scripting interfaces for some time yet is correct. (And my statement that the documentation on these has been less than 100% complete for Read More... Posted Wednesday, January 14, 2004 11:41 AM by Eric Lippert | 12 Comments Filed under: Scripting, Security, COM Programming

• Script And IE Security Part Two: Digging Deeper

  I want to continue my foray into the security semantics of the script engines this week, for a couple of reasons. First of all, this information isn't really clearly documented anywhere outside of our internal documentation. Most of the interfaces are Read More... Posted Tuesday, January 13, 2004 5:55 PM by Eric Lippert | 4 Comments Filed under: Scripting, Security, COM Programming