At 11:38 AM 11/22/96 -0600, Ken Hardy wrote:
>Does it do it by modifying the tags in the HTML, or by recognizing and
>blocking the ActiveX content itself?
By recognizing specific tags in the HTML and eliding the content between
the tags. There's no reliable way to recognize an ActiveX object itself.
(Any other approach - like the Trend Micro one - relies on the data being
formatted correctly (MIME headers) and that it be delivered using a transport
being watched. We block ActiveX applet and object tags, which *only* protects
your web browser - but that's all we say we protect. There's many other
vectors..
-Rick
|
|
