简体繁体 English

IE9 Javascript注入问题

[英]IE9 Javascript injection issue

原文 2013-01-15 10:21:32 6 1 javascript/ internet-explorer-9/ code-injection

I am facing some issue with Javascript injection on IE9 (>Medium-high security). 我在IE9 （>中高安全性）上遇到Javascript注入问题。 In my application when user wants to add any web page to their bookmarks, they click a link, and it injects a Javascript into that page, this injected javascript grabs all details about page and redirect users to my site. 在我的应用程序中，当用户想要将任何网页添加到其书签时，他们单击一个链接，然后将Javascript注入该页面，此注入的javascript会获取有关页面的所有详细信息并将用户重定向到我的网站。 On IE9, it does not seems to be working with Medium-high security. 在IE9上，它似乎不适用于中高安全性。 I suspect this has to do something how IE9 handles cross-site javascript injection . 我怀疑这与IE9如何处理跨站点javascript注入有关 。 But, was not able to find any relevant information. 但是，找不到任何相关信息。

Can someone please help or guide me to some related information. 有人可以帮忙还是指导我一些相关信息。

Thanks 谢谢

1 个解决方案

You may find this TechNet post useful, especially the row "Allow scripting of Internet Explorer Web browser control". 您可能会发现这篇TechNet帖子很有用，尤其是“允许Internet Explorer Web浏览器控件的脚本”行。

Apparently Internet Explorer doesn't allow scripts to control the web browser except on Medium-Low and Low security levels. 显然，Internet Explorer不允许脚本控制Web浏览器，但中低和低安全级别除外。 Because of this, you won't be able to redirect the browser unless it's set to one of those two levels. 因此，除非将浏览器设置为这两个级别之一，否则将无法重定向。

Perhaps instead of redirecting them you could add some kind of notification to the DOM and give them a link to your website? 也许不用重定向它们，您可以向DOM添加某种通知并为他们提供指向您网站的链接？