Prev | Current Page 348 | Next

Rich Cannings, Himanshu Dwivedi, Zane Lackey, and Alex Stamos

"Hacking Exposed Web 2.0: Web 2.0 Security Secrets and Solutions"


5. After the control is completed, the COM object is stored on the user??™s operating
system for use on later visits. For example, the second or third time the user
visits the web page, the ActiveX control will verify that the COM object has
been installed and then request any information it needs form the user??™s
system, such as which version of XYZ software has been installed.
The following lists a small example of typical uses of ActiveX controls on major web
applications:
??? Lets users download and install programs automatically with a single click.
??? Allows a web application to execute a program already on the operating system
(such as meeting software).
??? Allows a web application to run scripts on the user??™s web browser or system.
??? Automates content within the web application, such as motion with objects.
Chapter 8: ActiveX Security 201
The following steps describe how a control is installed on a user??™s system:
1. A user visits a web application that contains an ActiveX control.
2. The web application refers to its class identi?¬? er (CLSID) and URL and prompts
the user to download the control.
3. If the user agrees to download and install, installation occurs.


Pages:
336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360
news news news news news