Origins of The Zone Concept
Internet Explorer 4 introduced a security zone concept into Internet Explorer. However, this is a generic issue which is not Internet Explorer specific; some other browsers also implicitly implement the Local Computer zone.
There are four well known zones in Internet Explorer:
- Internet. The default zone. Everything which does not belong to other zones.
- Local intranet.
- Trusted sites. Usually used to list trusted sites which are allowed to execute with minimal security permissions (e.g. run unsafe and unsigned ActiveX objects).
- Restricted sites.
These zones are explained in detail by Q174360: How to use security zones in Internet Explorer.
There is also an additional hidden zone:
- Local Computer zone (or My Computer zone). This zone is particularly interesting because it can access files on the local computer. Historically this zone has been extremely insecure, but in recent versions Internet Explorer (for Windows XP) steps have been taken to reduce risks associated with zone.
Local intranet, Trusted sites and Local Computer are usually configured to be privileged zones. Most cross-zone scripting attacks are designed to jump from Internet zone to a privileged zone.
Read more about this topic: Cross-zone Scripting
Famous quotes containing the words origins of, origins, zone and/or concept:
“The origins of clothing are not practical. They are mystical and erotic. The primitive man in the wolf-pelt was not keeping dry; he was saying: Look what I killed. Arent I the best?”
—Katharine Hamnett (b. 1948)
“Lucretius
Sings his great theory of natural origins and of wise conduct; Plato
smiling carves dreams, bright cells
Of incorruptible wax to hive the Greek honey.”
—Robinson Jeffers (18871962)
“Just like those other black holes from outer space, Hollywood is postmodern to this extent: it has no center, only a spreading dead zone of exhaustion, inertia, and brilliant decay.”
—Arthur Kroker (b. 1945)
“The nearer a conception comes towards finality, the nearer does the dynamic relation, out of which this concept has arisen, draw to a close. To know is to lose.”
—D.H. (David Herbert)