Viktor78

Here is a bug that I was pointed to:

Reproduction steps

1 set start page to about:blank
2 open new IE instance
3 enter the following code in the address bar
javascript:alert(navigator.userAgent)
4 IE7 does not process the javascript command

In IE6 the javascript command is working as expected.

I hope that the public bug tracking database of IE will reopen soon.

Best regards,

Viktor
--
http://www.quero.at/
The New Web Experience



Re: Internet Explorer Extension Development IE7 bug: javascript in address bar not executed

EricLaw-MSFT

Perhaps surprisingly, this is actually by-design, a side-effect of changes in how we navigate to Javascript URIs in IE7. From the About protocol, you cannot navigate to a JScript URI.



Re: Internet Explorer Extension Development IE7 bug: javascript in address bar not executed

Viktor78

Thanks for the answer, Eric. If it is not too difficult, I would rethink this design decision because there is no obvious reason for end-users why they should not be able to enter javascript commands in the address bar when the current location is an about URI.

Many users including me have set their starting page to "about:blank".





Re: Internet Explorer Extension Development IE7 bug: javascript in address bar not executed

unique_username

Viktor78, I totally agree. This was one of the first bugs I entered into IE Feedback when it opened. For developers, this feature was very helpful, to quickly test something out. I would even accept if IE popped up an "Are you sure " confirmation before continuing , but to completely block it, was a very bad idea.

PS If there is an "attack vector" here, then I really have to wonder about the security model in IE. Surely this "band-aid" is covering up a much bigger problem.