IE 7 final release and window.prompt

Question

Hello,

The release notes for the final version of IE 7 has this entry:

Generic Spoofing Risk Reduction in Internet Explorer 7--The window.prompt script method is blocked and the gold Information bar is displayed by default in Internet Zone for Internet Explorer 7. The helps prevent websites from spoofing things such as the logon screens of other websites. This is a new security enhancement for Internet Explorer 7.

Was this behavior in any of the IE 7 betas or the RC1? Or is it brand new in the final release?

Thanks

 

Answer 1

This was added for RC1, I believe.

Answer 2

Is there a workaround for this?

 

Answer 3

Please, please fix this!!!
I can't tell you how many sites will break.

Andrew Csontos

Answer 4

You may already know this, but the user can choose to turn this off. It is in the Advanced settings: "Allow websites to prompt for information using scripted windows"

Answer 5

Ok, I found that setting under Security Settings for each zone.

I guess the more important question is how do I get it to work with Menu Extensions? I have one I use (and need) for work that uses the prompt() function. The setting above has no effect.

 

Answer 6

Please, please reconsider this! Let the prompt working by default.

Also, if the Dialog Window uses the provided height as the height of the client area (which makes sense), please allow smaller heights than 100px.