Hello, I was wondering if object tags are more secure than embed tags. What can object tags do that embeds can't? And vice versa
Thanks
2007-01-18 20:27:07 · 5 answers · asked by smackjack 3 in Computers & Internet ➔ Security
The object tag is standard compliant - embed is Netscape proprietary. Capability and security are generally the same.
Mozilla GRE support for object is not good enough yet.
The object tag can have/contain activeX technology this is afaik not true for embed.
This activeX tech addresses IE & that can be very dangerous to IE because of the way IE handles these components and because IE is deeply rooted in the Windows system.
Microsoft has done soemthing about this for IE7 but IMHO in an half hearted attempt. Reason for this dilema is that all current MS OS are configured for maximum abilty. This is good when the OS is installed in the save surroundings of a company net. But we are serfing internet with it and that is not such a halcyon & safe palce.
Mozilla browsers generally avoid this problem but the user can install activeX support. This is not much of a problem when the user uses whitelisting.
pref("security.classID.allowByDefault", false); But if set to true
You have the chance to manipulate the general hosting flags.
pref("security.xpconnect.activex.global.hosting_flags",9);
The values can range from save to dangerous ( according to the following Mozilla documentations)
0 means no hosting of activex controls whatsoever
13 means medium settings (safe for scripting controls and download / install)
31 means host anything (extremely dangerous!)
IMHO an activeX manager the helps to find find and whitelist cass ID.
Example: Media Player: ClassID.CID6BF52A52-394A-11D3-B153-00C04F79FAA6
Which have numerals that are far too long for me to remember and that are not easily/openly enough available for end user type users such as I am.
thx for reading my post
2007-01-20 03:19:29 · answer #1 · answered by Yttl 6 · 1⤊ 0⤋
Embed Vs Object
2016-11-02 22:43:20 · answer #2 · answered by carrilo 4 · 0⤊ 0⤋
positioned swf merchandise in a div and use javascript i.e.
2016-10-15 10:50:13 · answer #3 · answered by tegtmeier 4 · 0⤊ 0⤋
Maybe that's right
2016-07-28 07:45:39 · answer #4 · answered by Anonymous · 0⤊ 0⤋
Interesting, I was wondering the same thing myself
2016-08-23 15:35:38 · answer #5 · answered by Anonymous · 0⤊ 0⤋