Thread: IE7 Security
View Single Post
  #7  
Old 01-22-2007, 09:24 PM
felix8406's Avatar
felix8406 felix8406 is offline
Elite Members
 
Join Date: Aug 2006
Location: San Antonio, TX
Posts: 3,334
felix8406 will become famous soon enough

You are very welcome, Znod.

Another protection from IE7 that is activated by default or that can simply be selected by opening IE7, going to Tools, Internet Options, Security tab and choose the "Reset all control to default level" option is Protection against cross-domain scripting attacks.

During a cross-domain scripting attack, one Internet domain scripts another domain to manipulate its content. For example, let’s say you received an email about a certain product. When you click the link and open the website, that website will open a new window containing your legit bank website. As you enter the banking information on the legit bank website, the hacker can easily extract the information you are entering.

IE7 can prevent this by appending the domain name from which each script originates and allowing that script to interact only with windows and content from that same domain. This ensures that only your bank domain can see the information. This also protects against malware by limiting the potential for a malicious website to manipulate flaws in other websites.
Reply With Quote
 
Page generated in 0.11117 seconds with 9 queries