开发者

Detect whether the ie8 xss filter is enabled

Is there a method by which we can detect if a user using ie8 has the XSS filter enabled?

A开发者_高级运维s far as I can tell, nothing changes in the User Agent or in the http headers when ie8 has the XSS filter enabled vs when it does not. That leaves some client-side detection of the use of the filter. Would it be possible to write a test page that will tell me if the filter is active?


I know of no way to tell. IE fails to throw an error when it blocks the communications and Ie has no way to check what settings (or what security zone) IE has from javascript. So, you have no idea what is going on. This XSS filter is a menace.

Scott.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜