Opting in to the Information Bar


The information published in this post is now out-of-date and one or more links are invalid.

—IEBlog Editor, 20 August 2012

So this is my first post on this blog, my name is Phil Nachreiner, I’m a developer on the IE team.  I’ll post more about myself in another time, but I’d like to talk briefly about opting into the security features we added in XPSP2.  For example, we’ve made it extremely easy to opt existing applications that use the WebBrowser Control into the XPSP2 Information Bar without having to recompile the application.  In the registry under the key:

HKLMSoftwareMicrosoftInternet ExplorerMainFeatureControl 

There exists the FEATURE_SECURITYBAND key:
HKLMSoftwareMicrosoftInternet ExplorerMainFeature ControlFEATURE_SECURITYBAND

This is the Information Bar key. You can opt an application in by adding a DWORD of your exe and setting the value to 1.  In order to see notifications, you will also need to opt into a Feature Control that triggers a notification for example the WEBOC_POPUPMANAGEMENT key provides Popup notifications (See the Information Bar link below for other notification keys).

In my registry I see that Maxthon and MSN Explorer have both opted into the Information Bar, cool!! 

We’ve also provided a way to programmatically enable the Information Bar and this can be done through the: CoInternetSetFeatureEnabled API

To read more information specific to opting in to the Information Bar see this MSDN article:

http://msdn.microsoft.com/library/default.asp?url=/workshop/browser/hosting/wbcustomization.asp

Here’s two other MSDN articles that talks about feature control keys:

http://msdn.microsoft.com/library/default.asp?url=/workshop/author/dhtml/overview/XpSp2Compat.asp

http://msdn.microsoft.com/library/default.asp?url=/workshop/security/szone/reference/enums/INTERNETFEATURELIST.asp

-Phil

Comments (8)

  1. Anonymous says:

    sp2, sp2, sp2, sp2.

    Great.

    Where’s SP1 for Win2003? Way overdue. Normally, new server releases in the past haven’t been a probably, but I’m going the Gartner route on 2003 and telling no one to use it until an SP comes out and it works well.

  2. Anonymous says:

    Windows Server 2003 SP1 is planned for the first half of CY05, according to the Windows Server Product Roadmap at http://www.microsoft.com/windowsserver2003/evaluation/overview/roadmap.mspx.

    You can find Gartner’s recommendation from soon after the product launch at http://www4.gartner.com/DisplayDocument?ref=g_search&id=393013

    "Consider the stability of any new product suspect until proven, but Gartner believes that WS03 will prove solid. The beta program was more active than the beta program for Windows 2000, and customers gave very good early feedback. Enterprises have little reason to wait for a service pack. However, Gartner recommends that customers perform normal regression and release compatibility tests and monitor feedback from installations before deploying the release."

  3. Anonymous says:

    "Maxthon and MSN Explorer have both opted in"

    Yep, done in Zeepe too. Check "What’s new in 7.1.1" here:

    http://www.zeepe.com/zeepeinfo/zp_download.asp

    See it at work in the Zeepe Zowser (Internet Explorer in less than 40Kb of resources):

    http://www.zeepe.com/zeepeinfo/zp_samples.asp

    Jerry

  4. Anonymous says:

    "Feature Control" should be "FeatureControl" (as it is in the linked pages, and in the actual registry in XP) and I don’t see "the FEATURE_SECURITYBAND key" — I’m assuming that it doesn’t simply "exist", but rather must be created.

  5. Anonymous says:

    Can I programmatically show the Information Bar using Win32 API? I want to provide my own message and Popup Menu for the bar.

    Thanks,

    Ram

  6. Anonymous says:

    Hosting applications can customize the UI displayed when one of the URL Actions are triggered. In order to allow this, there are several new OLECMDID that come in through IOleCommandTarget::Exec when you implement IOleCommandTarget on your implementation of IDocHostUIHandler. See the MSDN Article:

    http://msdn.microsoft.com/library/default.asp?url=/workshop/browser/hosting/wbcustomization.asp

    The Information Bar section lists the OLECMDID’s and provides more info

  7. Anonymous says:

    Here’s a suggestion for app authors – make sure that the info bar can also be opted out of from within your application. In Firefox the only info bar you can opt out of is the one that shows a popup has been blocked.

Skip to main content