Problem: Opening any of the html sample pages of FCKEditor from the filesystem in IE7 gives an "Access Denied" error coming from file fckeditor\editor\js\fckeditorcode_ie.js on line 62 with the code: "B.open("GET",A,false);".
The source for this can be found under fckeditor\editor\filemanager\browser\default\js\fckxml.js. Here is the function being called
FCKXml.prototype.LoadUrl = function( urlToCall, asyncFunctionPointer ) { var oFCKXml = this ; var bAsync = ( typeof(asyncFunctionPointer) == 'function' ) ; var oXmlHttp = this.GetHttpRequest() ; oXmlHttp.open( "GET", urlToCall, bAsync ) ; // offending line if ( bAsync )
Re: IE7 Access Denied - Local Filesystem
A customer has a very locked down IT system and have recently changed their policy regards 'new ActiveXObject' javascript method call.
Their new security policy is being rolled out gradually across their organisation.
Individual PCs have reported FCKEditor working one day and not working the next, there is space reserved on the form for FCKEditor, but it never appears.
This was first reported about a month ago, but so many people are now affected that the whole organisation is contemplating stopping using our web application.
Obviously this is now the No 1 priority item on my development list !!!!
Their security change is as follows:
They used to prevent the browser from executing the method - we tweaked FCKEditor to catch the exception and do something sensible.
Now they scan the js file and prevent the file from being cached - it is downloaded, then discarded by the client.
Hence, any javascript file with 'new ActiveXObject' in it is unavailable to the client.
I'm in the process of moving the offending 'new ActiveXObject' code into a separate js file so FCKEditor can continue operating when the offending file is blocked.