Wednesday, June 06, 2007
Monday, June 04, 2007
Status Bar Scripting--Scripts will no longer be able to set the status bar text through the window.status and window.defaultStatus methods by default in the Internet and Restricted Zones. This helps prevent attackers from leveraging those methods to spoof the status bar. To revert to previous behavior and allow scripts to set the status bar through window.status and window.defaultStatus, follow these steps:
- Open Internet Explorer, click the Tools button, click Internet Options, and then click the Security tab.
- Click Internet or Restricted sites, and then click the Custom level button.
- Scroll down to Allow status bar updates via script, select Enable.
- Click OK until you return to Internet Explorer.