Prev | Current Page 343 | Next

Rich Cannings, Himanshu Dwivedi, Zane Lackey, and Alex Stamos

"Hacking Exposed Web 2.0: Web 2.0 Security Secrets and Solutions"

As
sites move away from the thick clients solely on the OS, web applications are relying on
ActiveX controls that will still depend on the OS but now reside inside the browser itself.
Using some type of client with a web application is becoming more popular as applications
try to do more on the web than simply display static content.
ActiveX is a Component Object Model (COM) object. COM is used to enable interprocess
communications (IPC) through various parts of the OS and its applications. COM also is
used for intraprocess communication, meaning the control is loaded in-process. The
latter is the most common usage scenario for ActiveX controls. COM is used with ActiveX
primarily because it provides a common interface for interacting with arbitrary objects.
ActiveX objects allows a program to self-register, add registry/file system entries, and
automatically run. Essentially, COM objects allow methods and interfaces to be called
from one application to another, without them having to know the ins and outs of the
application itself. A simple example of COM is allowing Microsoft Word to incorporate
data from MS Excel in real-time (with no copying and pasting required).


Pages:
331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355
news news news news news