homepage Welcome to WebmasterWorld Guest from
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member
Home / Forums Index / Code, Content, and Presentation / JavaScript and AJAX
Forum Library, Charter, Moderator: open

JavaScript and AJAX Forum

Do *.hta cause security warning in SP2?
Do *.hta cause security warning in SP2?

Msg#: 2828 posted 3:07 pm on Dec 2, 2004 (gmt 0)

I intent to write some hta and let my visitors save to HD
and run it locally, I don't want my hta look suspicious. So
which one cause security warning in SP2?(default setting)

1. Start/click on HTA page in local zone.
2. Hta tries to access FSO (FileSystemObject)
2. Hta tries to WScript.Shell

Don't have XP, can't test it. really appreciate any info..

Thanks for your kind help....

<a href="#" onclick="fso=new ActiveXObject('Scripting.FileSystemObject')">FSO</A>
<a href="#" onclick="wsh=new ActiveXObject('WScript.Shell')">WScript.Shell</A>



WebmasterWorld Senior Member drdoc us a WebmasterWorld Top Contributor of All Time 10+ Year Member

Msg#: 2828 posted 1:28 am on Dec 3, 2004 (gmt 0)

No security warnings should be generated for either of them (tested, and did not receive any), since it's all run locally. Also, that's the way HTA's are designed, to allow privileged access in a normally insecure environment.


10+ Year Member

Msg#: 2828 posted 3:36 am on Dec 7, 2004 (gmt 0)

Be aware that the default settings for both Norton and McAfee antivirus might detect some of the actions the HTA takes as suspicious and suspend operation until the user clicks OK.
I had a particular problem with an HTA that used WSH Sendkeys. Norton prevented it.
Had to go into Norton's settings to disable that behavior.

Global Options:
 top home search open messages active posts  

Home / Forums Index / Code, Content, and Presentation / JavaScript and AJAX
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved