Monday, January 31, 2005

A security option in IE you may wish to change !

I just picked up some very interesting information via colin's blog.

It seems that in IE javascript can extract data out of your clipboard. It doesn't work with FireFox either because the feature is not supported or off by default. Luckily, it is a security option and it can be disabled.

  • Go to Tools --> Internet Options...
  • Click on the Security Tab
  • Select Internet Zone and then click Custom Level...
  • Scroll down to the scripting section and see "Paste operations via script"
  • Change the value to Prompt or Disable

Can't Believe what i am saying, see it in action by copying some text, and clicking the link: Show clipboard contents 

Only IE and other IE based browsers are @ risk, like Maxthon / MyIE2, no probs with firefox,netscape,etc...

No comments: