Posted by Joe Barta on 01/21/06 00:42

Andy Dingley wrote:

> The way in which an average IE treats HTAs is so
> insecure as to make HTAs a clear and present security threat in
> any organisation, such that they need to be hunted down and
> destroyed on sight.

Thank you for everything in that last post. I truly appreciate your
insight.

If I may pester you with a few more questions... now I understand that
an ActiveX control in a hta can be trouble by design and even by
accident. A well meaning ActiveX control author might code something
that causes trouble by accident and even an innocent control may be
taken advantage of by a malicious coder and be used for bad deeds. So
far I'm correct?

Could the same also be said of a java applet?

Let's suppose we are ONLY talking about hta's WITHOUT any ActiveX
controls... such as the button designer. Do you see a concern with
them?

Joe Barta

[Back to original message]