ansaurus

Question

ActiveX Content in a local web page, and "the mark of the web"

Answer 1

+3 A:

I've been trying for a while to make it work, and it just didn't. I still get the warning bar.

The usual cause of frustration here is that the Mark Of The Web includes a trailing newline. That newline must be present. And it must be a Windows newline: CR followed by LF. If you edit your file in a sensible text editor that defaults to saving with normal LF newlines, your MOTW will mysteriously not work.

The MOTW is at the very very beginning of the file, and in string literal terms would look like:

"<!-- saved from url=(0014)about:internet -->\x0D\x0A"

Microsoft have not done a good job of documenting this at all.

bobince 2010-04-26 23:21:49

bobince: Thank you for your reply. I saw this somewhere and made sure this is happening. I'm using Notepad++, set to Windows format and to show me ALL characters. I put the MOTW right at the start of the file, and it has CR and LF at the end of the line. It's still not working... Any other ideas?

Daniel Magliola 2010-04-26 23:43:55

@DanielMagliola: Check you're not saving it as UTF-16LE (which Windows misleadingly calls “Unicode”). Apart from being generally a bad choice of encoding for web pages, UTF-16-without-BOM also makes the MOTW fail for some unknown reason. If it's not that, I don't know... could you maybe upload a non-working file somewhere to look at?

bobince 2010-04-27 08:18:40

Just checked? The file was encoded as ANSI. Changed it to UTF-8 with BOM, and still doesn't work.You can see the file here: http://farhatguitar.com/motw.htm (of course it works in that URL, but downloading it, I get the activex warning)Thank you!

Daniel Magliola 2010-04-27 15:03:37

The newline in that file is LF, not CRLF. (UTF-8 is fine, both with an without BOM, though BOM is meaningless for a UTF-8 and should generally be omitted.)

bobince 2010-04-27 15:27:28

bobince, ouch, just checked. I think the fact it's in a linux server is screwing with that newline, sorry. Or maybe filezilla is changing the newlines when uploading? In my local hard drive, I promise it's CRLF. I can upload it zipped if you want..

Daniel Magliola 2010-04-29 00:21:10

You could try, though if I load your file into an editor and save it out again with CRLF line endings and no other changes, IE loads it without security complaints. (I guess the line ending change on your server is because you uploaded it using FTP in ASCII mode? In this mode it automatically changes all line endings from the client's convention to the server's, which of course is terrible because you almost never want that. You should be able to tell your client to always use BINARY mode... or, better, stop using ancient, insecure, awful FTP and go to SFTP instead.)

bobince 2010-04-29 00:27:07

ansaurus

tags:

views:

answers:

ActiveX Content in a local web page, and "the mark of the web"

related questions