Hi Shawn, > > This cleanly solves issues 1 and 4. I had huge problems with 3, but > > now it's suddenly started working great. > > Awesome!!!
:) XmlHttp is making trouble again, though, and I don't know why... > > As for the calendar, it just seems to be working. > > Is it possible this is because the calendar a 'normal' but > named window? Most other scripts in DQSD use the default > openSearchWindow code without the name argument, perhaps the > calendar, since it opens named "dqsdcal", is opening with > increased rights? Just conjecture, but if that's the case it > might be a temporary solution for us until MS becomes aware > of the potential vulnerability. I don't know - I tried to look into what the calendar was doing, and all I can find is window.createPopup() in showcal. From [1] (section called "Does Your Web Site Use Pop-up Windows?") I've noticed that createPopup is the only sanctioned way to do popups these days... Maybe that's why it works? Can it be cleanly applied to the others (help window, comx)? Kim [1] http://msdn.com/library/en-us/dnwxp/html/xpsp2web.asp ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ DQSD-Devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/dqsd-devel
