DataBoy Logo
Website Design and Hosting
Allowing Blocked Content with Internet Explorer

Windows XP SP2 and Vista

Web Tips

This is the first in what will be an ongoing section of Tips and Tricks to help you navigate and use the Web to your advantage.

Please check back here for additional helpful information.


A link section is also in the works, which will provide you with links to many web sites with information on utilizing and promoting your web site.

If your operating system is Windows XP, Service Pack 2 (SP2), or Vista, by default, if you are using Internet Explorer 6 or above, any time a web page tries to access an ActiveX component, or uses a JavaScript code bit, you are faced with the following toolbar alert:

Toolbar Alert

Unless you frequent pornographic sites, click on links in spam mail, or visit other sites run by unscrupulous characters, this security precaution is simply a big annoyance. This is particularly the case where JavaScript is concerned. Javascript was built to be safe, with its access limited to the browser only - not your computer.

Malicious hackers have found ways to take advantage of browser security holes, using JavaScript to monitor users activities, as well as access files on the victim's computer. Once these security holes have been compromised, the browser manufacturer issues a security patch to cover the hole, preventing future use of the hack. Of course, these integrity-impaired individuals are steadily working at finding and taking advantage of some other vulnerability to make them feel they have some power over you and me.

So, is JavaScript 100% safe to use? The answer is "no". Is it relatively safe? Yes. A great number of Internet Web sites use JavaScript to run navagation menus, and other useful display tools. If you have JavaScript turned off, you may be missing out on more then you know, and you probably receive a lot of script errors. Most browsers have JavaScript on by default. Most users have their browsers set to freely run JavaScript code. The security problems are by no means epidemic. However, if I have made you uneasy rather than convincing you to accept JavaScript, I'll provide a less aggravating alternative to Microsoft's toolbar alert later on in this article.

ActiveX Controls

ActiveX is a Microsoft product that allows code to be run on your computer. This is, potentially a very dangerous proposition. An ActiveX program can do anything you do on your computer, and probably more. The security in ActiveX involves what is called a digital signature. The code must be written and signed by a trusted software developer in order to run. This allows a fair degree of security, but cautions are recommended.

Internet Explorer allows several settings regarding ActiveX Controls. To check or change these setting, go to Tools->Internet Options and select the Security tab near the top of the window.

You can simply set your Internet Security to "Medium" (or "High" if you feel overly cautious), or you can create a custom setting by selecting the [Custom Level] button.

Security Settings

In the Custom Level window (shown below), make sure "Download unsigned ActiveX controls" is disabled, or, at the very least, set to "Prompt". If set to "Prompt", you will be notified when there is an unsigned control wanting to visit you and decide at that time whether you trust the site enough to let the control through your doorway.

Similarly, you can set "Prompt" for other settings and you are at least in control at all times.

Security Settings

Removing the Internet Explorer Toolbar Alert

To remove the Internet Explorer Toolbar Alert, go to Tools->Internet Options and select the Advanced tab near the top of the window.

Security Settings

Scroll down to the Security section, and select Allow active content to run in files on my computer. This will get rid of the pesky toolbar alert, and allow JavaScript to run automatically. ActiveX warnings will appear when necessary if you followed the suggestions on ActiveX above. If you're still unsure about JavaScript, see my alternative to the IE Toolbar Alert further below.

Security Settings

An Alternative to the Alert Bar

If you are stuck on Internet Explorer as the only browser you want to use, you're done. Don't read any further.

That said, there are better browsers available at no cost that actually strive to comply with the Web standards that the world outside of Microsoft is working hard to achieve. One of those Browsers is Firefox, which is available for download on my Home page. There is a plug-in (an additional feature you can download) available for Firefox called "NoScript".

NoScript does the same thing as the Internet Explorer alert bar, with one very important exception - it remembers the sites you have allowed content on. This means, once you have visited a site and accepted its content as okay, you will not be bugged by the code blocker on your subsequent visits to that site. Of course, you can always take a site back off the list if you choose.

There are many other advantages to the Firefox browser. For more information, check these sites: