[Mono-bugs] [Bug 594308] New: Loading Report HTML gives MSIE popup "...restricted this webpage...", fix using "Mark of the Web"

[bugzilla_noreply at novell.com]

http://bugzilla.novell.com/show_bug.cgi?id=594308

http://bugzilla.novell.com/show_bug.cgi?id=594308#c0


           Summary: Loading Report HTML gives MSIE popup "...restricted
                    this webpage...", fix using "Mark of the Web"
    Classification: Mono
           Product: Mono: Tools
           Version: 2.6.x
          Platform: Other
        OS/Version: Windows XP
            Status: NEW
          Severity: Minor
          Priority: P5 - None
         Component: Gendarme
        AssignedTo: mono-bugs at lists.ximian.com
        ReportedBy: andyhume32 at yahoo.co.uk
         QAContact: mono-bugs at lists.ximian.com
          Found By: ---
           Blocker: ---


User-Agent:       Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
Trident/4.0; .NET CLR 2.0.50727; .NET CLR 1.1.4322; .NET CLR 3.0.04506.30; .NET
CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR
3.5.30729)

When one loads a Gendarme report page (from disk) into Internet Explorer, MSIE
shows the gold Information Bar reporting:
"To help protect your security, Internet Explorer has restricted this webpage
from running scripts or ActiveX controls that could access your computer. Click
here for options..."
(The script in question is the JavaScript providing the hide/expand node
feature).

This can be fixed by having Gendarme add the "Mark of the Web" directive to the
pages it creates.


When loading a page from _disk_ MSIE give it high permissions.  Thus it prompts
as above to allow the user to permit this possibly dangerous operation.  The
Gendarme reports do not require those high permissions however but just normal
(Internet) permissions.  Adding the "Mark of the Web" directive to the page
tells MSIE to load the page with Internet permissions and therefore it doesn't
need to prompt.  For more info see e.g.
http://msdn.microsoft.com/en-us/library/ms537628(VS.85).aspx
http://blogs.msdn.com/ie/archive/2005/03/07/388992.aspx 
http://blogs.msdn.com/marcelolr/archive/2010/03/29/mark-of-the-web-for-small-utilities.aspx

I added the following single line in the page's HEAD element just before the
TITLE element and this fixed the problem: no prompt and the hide/expand script
still works. :-)

[[
    <!-- saved from url=(0014)about:internet -->
]]

Reproducible: Always

Steps to Reproduce:
Load a Gendarme report into MSIE (on XP SP" or later), see the gold Information
Bar popup at the top edge of the page.
Actual Results:  
See the gold Information Bar popup at the top edge of the page.

Expected Results:  
See NO gold Information Bar popup at the top edge of the page, and the
[hide]/expand button script still works.

-- 
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.
You are the assignee for the bug.