It doesn't seem to Geoff, I tested it with a 100%x100% object:

http://anticipatechange.com/huseyin/shifty.html

The object tag has noscale params, there is one problem though, it seems as
if the replaced objects appear to still be loading from the browsers
perspective.

Besides this, seems like a reliable exploit so far. Nice job Kevin.

M.

On 4/20/06, elibol < [EMAIL PROTECTED]> wrote:
>
> Would it make sense for this to work with all Active X Objects? The idea
> is to override object activation by rewriting the objects after the document
> is loaded? Is this a hole in the activation process, where it will only
> force activation when the page is being initialized? Objects written after
> the page is loaded slip through?
>
> M.
>
> On 4/20/06, Kevin Newman < [EMAIL PROTECTED]> wrote:
>
> > I didn't want to have to redefine all the stuff that has already been
> > defined in the html object. So I made this: :-)
> >
> > http://www.unfocus.com/projects/PatentMagic/
> >
> > A super tiny js file include and a stylesheet takes care of all object
> > activation. It's a bit brute force, but it should get the job done if
> > you are looking for a quick fix and are using static embedded html. If
> > anyone has any ideas on how to make this more robust, please let me
> > know. :-)
> >
> >
> > Kevin N.
> >
> >
> > Geoff Stearns wrote:
> > > you could do this with flashobject really easily.
> > >
> > > just call fo.write() whenever you want and it will replace the object
> > > you target with your flash movie.
> > >
> > >
> > >
> > > On Apr 20, 2006, at 11:04 AM, Kevin Newman wrote:
> > >
> > >> I prefer solutions that try to hide IE's lack of conformity, like
> > >> Dean Edwards's IE 7 script:
> > >> http://dean.edwards.name/IE7/
> > >>
> > >> There are just too many installations to realistically ignore them.
> > >>
> > >> Speaking of hacking on IE, is there a way to prevent an object from
> > >> loading? By that I mean, I want to use Object tags to embed a Swf,
> > >> but I don't want it to download or load in the background until I
> > >> tell it to via a script interaction (vbscript or javascript). Will
> > >> hiding it via css do the trick, or will I need to take further steps
> > >> to keep it from loading?
> > >>
> > >> Thanks,
> > >>
> > >> Kevin N.
> > >>
> >
> >
> > _______________________________________________
> > Flashcoders@chattyfig.figleaf.com
> > To change your subscription options or search the archive:
> > http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
> >
> > Brought to you by Fig Leaf Software
> > Premier Authorized Adobe Consulting and Training
> > http://www.figleaf.com
> > http://training.figleaf.com
> >
>
>
_______________________________________________
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders

Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com

Reply via email to