SAMPLE: SECUMGR Overrides Security Manager for WebBrowser Host

ID: Q246227

The information in this article applies to:

Microsoft Internet Explorer (Programming) versions 4.01 SP2, 5

SUMMARY

Secumgr.exe is a sample that demonstrates how to override the default security manager in an MFC (C++) based WebBrowser control host.

MORE INFORMATION

The following file is available for download from the Microsoft Download Center. Click the file name below to download the file:

Secumgr.exe

Release Date: Nov-15-1999

For more information about how to download files from the Microsoft Download Center, please visit the Download Center at the following Web address

http://www.microsoft.com/downloads/search.asp

and then click How to use the Microsoft Download Center.

SECUMGR is an MFC dialog-based application that hosts the WebBrowser control. It exposes an implementation of the IInternetSecurityManager interface from the control site, which is used by the WebBrowser to override traditional security decisions. The highlighted function in this sample is ProcessUrlAction in the Custsite.cpp.

The sample provides a handful of check boxes to the user for disabling security-related functionality. These buttons map to URLACTIONs that are passed in to ProcessUrlAction. SECUMGR passes back the correct URLPOLICY to enable or disable these features (ActiveX, Script, Java) as requested. Note that most security decisions are made during page load and are not modifiable on the fly.

NOTE: In order to implement the IInternetSecurityManager interface on the control site, SECUMGR uses an unofficial technique that may not work correctly in future MFC versions. For additional information, click the article number below to view the article in the Microsoft Knowledge Base:

Q196835 HOWTO: Override the MFC Default Control Containment

REFERENCES

URL Security Zones Overview

Additional query words:

Keywords : kbfile kbsample kbSecurity kbWebBrowser kbIE401sp2 kbURLMon kbGrpInet kbIE500 kbDSupport
Version : WINDOWS:4.01 SP2,5
Platform : WINDOWS
Issue type :