Prev | Current Page 356 | Next

Rich Cannings, Himanshu Dwivedi, Zane Lackey, and Alex Stamos

"Hacking Exposed Web 2.0: Web 2.0 Security Secrets and Solutions"

Type cmd and click OK.
3. At the prompt, change the directory to C:\Program Files\Microsoft Platform
SDK\Bin.
4. Type signtool signwizard. A wizard will appear. Click Next.
5. Browse to ?¬? nd the ?¬? le you would like to digitally sign, and then click Next.
6. Select Custom, and then click Next.
7. Click Select From File and locate your MyCredentials.spc ?¬? le. Click Next.
8. Click Select From File and locate your MyPrivateKey.pvk ?¬? le. Click Next.
9. Select sha1 and click Next twice.
10. Enter a description of your ?¬? le and a web site address where more information
can be located. Then click Next.
11. Select Add A Timestamp To The Data, and in the Timestamp Service URL, enter
http://timestamp.verisign.com/scripts/timstamp.dll. (Note that timstamp.dll
does not contain the letter e.) Click Next.
12. Verify that all of the information is correct and click Finish.
You have successfully signed your file.
Chapter 8: ActiveX Security 205
Marking ActiveX Controls Safe for Scripting (SFS)
Marking a control safe for scripting (SFS) with the IObjectSafety method basically
gives the green light to any developer to manipulate methods/properties within the
COM object with their own script, such as a VBScript or JavaScript contained in web
pages.


Pages:
344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368
news news news news news