[richfaces-issues] [JBoss JIRA] Commented: (RF-8429) IE7 pops up ActiveX control warning when launching pages including Ajax built-in components such as rich:calendar

[Jay Balunas (JIRA)]

    [ https://jira.jboss.org/jira/browse/RF-8429?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12515814#action_12515814 ] 

Jay Balunas commented on RF-8429:
---------------------------------

Unfortunately, this is Microsoft-related issue. Up to IE8 they implement XMLHttpRequest, that is necessary for AJAX transport, as ActiveX control, so it generates warnings for any AJAX-enabled RichFaces component - and anything else that uses the standard IE Ajax transport. At most all known AJAX libraries use the same XMLHttpRequest object. 

ActiveX controls are enabled by default, so it oblivious result of custom policy in the customer's domain. They have to ask domain admin to setup appropriate security restrictions.

There are many options for those changes.  You can setup whitelists, allow administrator approved controls, or place their internal site in a security zone where this will not be a problem.  And they can push all of this down as a domain policy template...any MCSE should be able to lock this down.

> IE7 pops up ActiveX control warning when launching pages including Ajax built-in components such as rich:calendar
> -----------------------------------------------------------------------------------------------------------------
>
>                 Key: RF-8429
>                 URL: https://jira.jboss.org/jira/browse/RF-8429
>             Project: RichFaces
>          Issue Type: Feature Request
>      Security Level: Public(Everyone can see) 
>            Reporter: Gary Hu
>
> IE 7 browser pops up waring "Your security settings do not allow websites to use ActiveX controls installed on your computer. This page may not display correctly. Click here for options." on the information bar when Richfaces components with built-in Ajax capacities such as rich:calendar are presented on the page.
> This is due to the fact that ActiveX control is used to handle the Ajax request in Richfaces framework. 
> Can we find a fix to this issue? Can we handle the situation where ActiveX control is disabled by the browser?

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira