Cross-site scripting message in notification bar

Very common message. I’ve been seeing this for a while. Pops up at the bottom of the Internet Explorer window. In the notification bar.

image

image

The hyperlink (URL) that I had opened to trigger the above message is the following:

http://electronics.howstuffworks.com/gadgets/other-gadgets/10-gadgets-that-will-make-dads-day.htm

I’m pretty sure that http://www.howstuffworks.com or http://howstuffworks.com (without the www.) was added to the Trusted Sites zone but fairly certain that http://electronics.howstuffworks.com is not.

I tried adding the following URL to the Trusted Sites zone in Internet Explorer 10.

http://electronics.howstuffworks.com

imageTools, Internet Options, Security tab, Trusted Sites, Sites, Add button

In my case, the address http://electronics.howstuffworks.com is pre-populated (already there) in the Add this website to the zone box. So I just had to click the Add button and the Close button in the lower right of the Trusted Sites dialog box.

image

Then OK:

image

image
Result
Same message

Internet Explorer has modified this page to help prevent cross-site scripting.


If you’re in a corporate, locked down environment, the only thing you can do at this point is modify the Internet Explorer settings. But many organizations do control or govern their systems, including Windows and its native web browsing application, Internet Explorer. The best thing I can offer to any end-user (information worker) having this message is to simply click on the x on the right of the message bar at the bottom of Internet Explorer.

Search

Bing

internet explorer 9 messages at bottom

Answer

Internet Explorer 9 Notification bar: frequently asked questions

Can I ignore notifications?

Yes. The bar might be displayed until you navigate to a new webpage or click the Close button. For notifications involving security or privacy, Internet Explorer automatically takes the most secure action, and allows you to take less secure actions if you’re confident they won’t put your computer or information in danger.

Solution

image

Click the x to ignore the message and close the notification bar. The bar should [I think] also simply close itself if you do nothing, within like 5-10 seconds.

Forum

Microsoft Answers

How do I prevent Internet Explorer from modifying pages for cross-site scripting? Under the security tab for IE8 there is a new Scripting Section for XSS Filter, Disable it and the issue goes away.

 

I don’t ever touch this setting unless there’s some business justification or an RFP (request for proposal) outlining why it’s feasible to disable that setting. However, if you’re not at work and just in the context of a home computer, not used for business, then I’d suggest do it only if you understand what it does.

For more on the [Cross Site Scripting] XSS Filter, read the following articles:

More Information


MSDN Library

Event 1046 – Cross-Site Scripting Filter

Administrators


Windows Help

Cross-site scripting filter

Information workers, home, and end-users

Advertisements

Twitter and News integration on msnNow

I checked on msnNow just now and was pleasantly surprised with tweets. Normally, I’m not a big fan of more Twitter anytime, all the time so to speak. For sanity sake I prefer to stay out of it and only use it when I need it. But this is nice because now I don’t need to go to Twitter for the news. I can get both search [SEO] trends. The one catch is that I need them connected for search engine optimization (SEO) and should be logged into both Bing and Twitter persistently, meaning that I check the keep me logged in checkbox when I login and connect the two in the respective governance settings. Those settings are usually on the settings menu on the top nav bar of most sites.

Microsoft News Center

MSN Launches msnNOW to Keep You in the Know

“Kill switch” for Smartphones

I was researching this ‘kill switch’ I was reading about that Apple is going to apparently include in the next iPhone.

The following article was plucked from that research:

New York Attorney General
D.A. Gascón And A.G. Schneiderman To Convene Smartphone Summit To Address Epidemic Of Dangerous “Apple-picking” Street Crimes | Eric T. Schneiderman

From reading over briefly it is also a good source for seeing what issues are being discussed at a high political and legal [policy] level.

Internet Explorer throws alert on my Twitter “Discover” page

image

https://twitter.com/i/discover

When trying to hit the above site I get the following error message:

image

Internet Explorer blocked this website from displaying content with security certificate errors.

There’s a Show content button with an x next to it.

image

Continue reading

Apple WWDC 2013

The Apple World Wide Developer Conference is going on now. Products discussed, some new:

  • New mobile operating system
  • iOS 7
  • Mac OS upgrade
  • Mavericks
  • New MacBook Air laptops
  • Mac Pro workstation overhaul

Media Coverage

TechCrunch
Live From Apple’s WWDC 2013 Keynote
PC Magazine
Apple’s WWDC Reveals: What They’re Saying
CNET
Apple WWDC 2013 live blog
Wall Street Journal
Live Recap: Apple’s WWDC Keynote
 

Continue reading

Circadian rhythm and business process

Scheduling > Messaging

Scheduling is greater than messaging

Business processes now these days make me think of the term circadian when you contrast and compare it to the word rhythm. When I checked my Webster’s New World Dictionary just now it mentions the 24-hour cycle we have classified as a united defined as a day.

imageOutlook 2013 icon in desktop mode on Windows 8 [Professional]

 

 

 

This is why scheduling and messaging are so important when it comes to technology and applications.

imageMessaging and Mail apps on the Start menu in Windows 8

 

 

 

In the Outlook [MSFT] world, at least, the following rules apply:

E-mail

Scheduling

Calendar; your daily appointments. Tasks; events that need to be done but may not have a hard and fast start or finish. It’s not a meeting or appointment where you have to block off time to let people know. Operating systems [Linux/Mac/UNIX/Windows] on top of everything in Outlook and the server Exchange or other source [3rd party] have scheduling as well. Outlook should handle all the stuff on the client side so an end-user should never need to know scheduling on the server. But Outlook will retrieve information from the email server (e.g. Exchange, SunOS, Webmail). Sometimes it’s easier to go with a web browser approach if you don’t need all the rich features.

Messaging

Electronic mail; or as some call it, e-mail (email); depending on your preference, is simply the way you open, read, and dispose of [delete] the

Performance

Outlook handles both. But Outlook also handles a lot. I like to promote Outlook but only because it has such a robust [many] set of business features on the client side it’s a good sell. The negative, however, is that it’s a major performance bottleneck in terms of resource consumption. The workaround, technically, is to simply exit Outlook and free up resources.

You may ask “why didn’t you put messaging (email) first?”

Simple, e-mail is less important over the course of time. And the more you have the less important they become.

Referring to my point earlier, the web browser approach is sometimes a good workaround. You may save a hardware [memory] upgrade purchase.

Summary

Tips
  • Scheduling is more important than email.
  • Operating system and the computer [hardware] also handle scheduling.
  • Email is like snail mail. Short lived, ephemeral.
  • Leverage email clients, such as Outlook, to schedule certain tasks or appointments.
  • Set hard dates on deliverables by using alerts.
  • Don’t live in email. Close it when you won’t be using it. Free up resources.
Final summary
  1. Schedule
  2. Message
  3. Presence

One final tip: use an instant messaging client (e.g. Lync) if you close email and set your presence to available. Windows 8 also has built-in messaging app. Outlook also has SMS (text) integration for your phone so you can pull texts from your phone into Outlook. Check Outlook help for more.

Self-help

If you search http://support.microsoft.com for troubleshooting outlook that should give you a good start on

Continue reading