The Safe HTML filtering feature in Exchange Server 2003 helps make e-mail messaging safer. When you use Microsoft Outlook Web Access in Exchange Server 2003, the Safe HTML filtering feature helps protect you from malicious scripts that can be included in HTML-formatted e-mail messages or attachments. The following Microsoft Knowledge Base article describes how to work around this filtering feature when you must share files.
899394 How to share files that are removed by the "Safe HTML" filtering feature in Outlook Web Access for Exchange Server 2003
In Outlook Web Access, you may want to deploy e-mail solutions in which you must include code in e-mail messages. To deploy these e-mail solutions within the constraints imposed by the Safe HTML filtering feature, install the software update that is described in this article. This software update updates the Safe HTML filtering feature so that you can use the POST method in HTML forms.
After you install this software update, you must format the URL in the ACTION parameter as follows:
https://<server FQDN>/formpostdir/safeformpost.aspx
The directory and aspx page must be named as it is here.
When the URL is restricted to this format, there is less risk of malicious use of the POST method by unknown external sources.
Download information
The following file is available for download from the Microsoft Download Center:
Download the Exchange2003-KB912939-x86-ENU.exe package now.
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Prerequisites
You must install Microsoft Exchange Server 2003 Service Pack 2 (SP2) before you install the update.
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
836993
How to obtain the latest service packs for Exchange Server 2003
Restart requirement
You do not have to restart the computer after you apply this update. However, the Microsoft Exchange Information Store service and all dependent services will be restarted.
File information
The global version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the
Time Zone tab in the Date and Time item in Control Panel.
| File name | File version | File size | Date | Time | Platform |
|---|
| Exosal.dll | 6.5.7651.12 | 70,144 | 23-Mar-2006 | 21:58 | x86 |
| Mdbmsg.dll | 6.5.7651.12 | 3,357,184 | 23-Mar-2006 | 20:57 | x86 |
| Store.exe | 6.5.7651.12 | 5,253,120 | 23-Mar-2006 | 22:00 | x86 |
For more information about the terminology that Microsoft uses for software that is corrected after it is released, click the following article number to view the article in the Microsoft Knowledge Base:
824684
Description of the standard terminology that is used to describe Microsoft software updates
For more information about the naming schema for Exchange software updates, click the following article number to view the article in the Microsoft Knowledge Base:
817903
New naming schema for Exchange Server software update packages