IE CSS Expressions - Javascript Disabled
On my test machine, I have found that IE's proprietary CSS expressions do not work with JavaScript disabled. This is in conflict with a number of postings on the subject, including this one at Position Is Everything. Midway down the page, it says:
I'm thinking that this probably USED to be true, and has since been changed by a security patch. Does anyone know for sure?
The upper limit is enforced by a max-width on #sizer, and IEwin is included
via an "expression" hidden in a Conditional Comment in the head. While this is a
script, the user cannot disable this type of CSS expression when disabling
JavaScript.
I'm thinking that this probably USED to be true, and has since been changed by a security patch. Does anyone know for sure?
posted by tom at 9:16 AM
3 Comments:
http://www.gunlaug.no/contents/wd_1_02_01.html#item32
This person believes that it has to do with the browser's security level being set to "maximum". However, all I did was disable "Active Scripting" and that kills the expressions. At least this is confirmation that expressions don't work under all circumstances.
At http://www.fu2k.org/alex/css/frames/, Alex Robinson says:
When Microsoft released XP2, it upgraded IE6 so that javascript expressions within CSS are not executed if, and only if, the zone which a page resides within's security is set to 'High'. In most versions of IE6 the security setting for the Internet zone is set to 'Medium' and so this method will continue to work for most users with IE6. However, unless you can guarantee that your users' security will not be 'High' (eg. your site is situated within a trusted zone) or if you do not mind that some users (in all likelihood, people behind a corporate firewall) will not see your site as you intended, I can no longer recommend using this method.
Any script execution at the Style Sheet stack of the browser is a performance issue and more importantly a security threat. And the particular security settings mentioned above are irrelevant in the circumstances.
Good news is Microsoft is ending expressions in Internet Explorer as announced on Thursday earlier this week.
A very nice move towards the standard-compliant browser.
Post a Comment
<< Home