Monday, June 04, 2007

window.status no longer accessible thru script in IE7

Status Bar Scripting--Scripts will no longer be able to set the status bar text through the window.status and window.defaultStatus methods by default in the Internet and Restricted Zones. This helps prevent attackers from leveraging those methods to spoof the status bar. To revert to previous behavior and allow scripts to set the status bar through window.status and window.defaultStatus, follow these steps:

  1. Open Internet Explorer, click the Tools button, click Internet Options, and then click the Security tab.
  2. Click Internet or Restricted sites, and then click the Custom level button.
  3. Scroll down to Allow status bar updates via script, select Enable.
  4. Click OK until you return to Internet Explorer.


1 comment:

mallthorn said...

Had this problem but found the resolution

IE7 wouldn't scroll status bar text.

Under Internet options, Security Tab, Internet, Custom Level, "Allow status bar updates via script" is set to enabled. Will now work in IE7.

If this is default setting not many users will know the option exists!

Regards, Malcolm