JoshuaJoynoFerrer / np-activex

Automatically exported from code.google.com/p/np-activex
0 stars 0 forks source link

Script unsafe message #202

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
The following message is displayed each time I run the script below.

"Some of the script on this page are unsafe"

Script:
try {
    var ws = new ActiveXObject("WScript.Shell");
    ws.run("C:\\test.bat");
}
catch (e) {
    console.error(" - Error. test.bat is not installed");
}

I would like to use this extension for a large scale project, but my customer 
is not happy with having to click 'yes' every 15-20 minutes. Could the 
extension be changed so that the message is only displayed the first time the 
user accesses a Page?

Does it work before? If not, when did you find this problem?
This has always been the behaviour

What steps will reproduce the problem?
1. Run the script above
2. Wait several minutes
3. Run the script again

What is the expected output? What do you see instead?
Expected: Message is NOT displayed but script runs successfully.
Actual: Message IS displayed. Script runs if 'yes' is selected

What version of the product are you using? 1.5.0.0
On what operating system? Windows7
On which version of your browser? Chrome 23.0.1271.97 m

Original issue reported on code.google.com by wtaylor...@googlemail.com on 8 Jan 2013 at 10:24

GoogleCodeExporter commented 8 years ago
The security checkpoint cache cannot be cached in JavaScript accessible place, 
and it must be stored in the native process to prevent hacking.
The native module unloads when there's no object running. Keep an instance of a 
dummy object can extend the lifetime of the module.

Recommend: in your page, always keep an instance of an object to keep module 
from unloading.

Original comment by qiu...@gmail.com on 25 Aug 2013 at 5:37