Internet Explorer blocks "active content" - AKA JavaScript

[tokamak]

Hey guys, searched for a topic on this and couldn't find one, please forgive me if its been covered before. I have some very simple JS code on my site (an image rollover...I know, I know). The newest version of IE (the update that comes with SP2 I believe), however, won't allow the code and shows a yellow bar across the top of the browser window alerting the user to the presence of "active content". The user has the option of allowing the content (ie enabling the rollover), but I'd rather not the alert happen at all, seems very unprofessional to have a page with "errors". Is there some way to get around this? What about an external JS file? Is there another way to do image rollovers?

[MarkHutch]

There are several very LARGE sites I've seen lately that give a "security settings don't allow the active x on this page" message. Looks like some good work for web designers. :) No matter how low I set my security settings these sites still give the message. Wow, what a mess!

[tokamak]

UPDATE: seems like it only happens when I access the page locally. when I grab it off the net, no such problem. quite interesting.

[Bernard Marx]

SP2 has set the security for the Local Zone higher than for the web. This upside-down situation has come about because most exploits manage to find their way in by pretending that their in the Local Zone. Why they didn't just disable the Windows Scripting Host by default I don't know.

Here's an explanation, and a workaround for testing your pages locally:
[kbalertz.com ]

..and here's even more info:
[google.se ]

[adni18]

There's another post on this topic:

http://www.webmasterworld.com/forum91/2980.htm [webmasterworld.com]

[rocknbil]

^ ^ ^ Yeah that solves it, it does it with Flash too!

[tokamak]

thanks so much guys. have a good one.