tags:

views:

13

answers:

0
Q: 

Ready registry values from Windows Scripting Components

I'm trying to write a Windows Scripting Component (WSC) which is referenced in a webpage and needs to read a single registry value.

I use the WScript.Shell object for RegRead.

On Vista (with UAC) my component is only loaded when I mark WScript.Shell as SafeForScripting (via HKCR\CLSID{72C24DD5-D70A-438B-8A42-98424B88AFB8}\ImplementedCategories{7DD95801-9882-11CF-9FA9-00AA006C42C4} and HKCR\CLSID{72C24DD5-D70A-438B-8A42-98424B88AFB8}\ImplementedCategories{7DD95802-9882-11CF-9FA9-00AA006C42C4}).

This is would allow any webpage to directly referebce WScript.Shell. Is there any alternative?

related questions

Encryption in C# Web-Services
How Do You Secure database.yml?
ASP.NET LocationProvider
What do you (or your company) use for wiping a machine?
Can a proxy server cache SSL GETs? If not, would response body encryption suffice?
Java: What is the best way to SFTP a file from a server
How do I call a Flex SWF from a remote domain using Flash (AS3) ?
Best way to store a database password in a startup script / config file?
Using VM to get around VPN restrictions
Best references for secure coding practices in ASP.NET and classic ASP.
Secure Memory Allocator in C++
Resolving Session Fixation in JBoss
Best Practices for securing a REST API / web service
Defensive programming
Personal Linux web server
Block user access to internals of a site using HTTP_REFERER
Is there an Unobtrusive Captcha for web forms?
My website got hacked... What should I do?
What all do I need to escape when sending a (My)SQL query?
How do you disable browser Autocomplete on web form field / input tag?
Best .NET obfuscation tools/strategy
Are there best practices for testing security in an Agile development shop?
What is the best way to avoid SQL injection attacks?
Found a critical bug, but the company doesn't care
PHP Session Security