Important These steps may increase your security risk. These steps may also make the computer or the network more vulnerable to attack by malicious users or by malicious software such as viruses. We recommend the process that this article describes to enable programs to operate as they are designed to or to implement specific program capabilities. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this process in your particular environment. If you decide to implement this process, take any appropriate additional steps to help protect the system. We recommend that you use this process only if you really require this process.
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
In Internet Explorer 6 for Windows XP SP2, automatic download blocking suppresses file download dialog boxes that are not the result of a user action, such as a mouse click or a keystroke. When a file download dialog box is automatically blocked, an Information Bar appears at the top of the window. The Information Bar displays the following text:
To help protect your security, Internet Explorer blocked this site from downloading files to a computer. Click here for more options.
You can enable blocked downloads by clicking the security element on the Information Bar. By moving download prompts to the Information Bar, a developer can avoid installing unwanted code on a computer. Previously, Web sites could overwhelm you with file download prompts, and you could accidentally run unwanted software on a computer. With this change, file download prompts that are started automatically are more likely to be the result of a deliberate click and not an accidental action.
Applications that host the
WebBrowser control can take advantage of the tighter restrictions on file downloads. The restrictions are managed through a security feature control registry key that is named FEATURE_RESTRICT_FILEDOWNLOAD. By default, the Iexplorer.exe process and the Explorer.exe process run under this feature control. To add the FEATURE_RESTRICT_FILEDOWNLOAD registry key and your process to the registry, follow these steps:
- Click Start, click Run, type regedit, and then click OK.
- Locate one of the following registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl
- Right-click FeatureControl, click New, and then click Key.
- Type FEATURE_RESTRICT_FILEDOWNLOAD, and then press ENTER.
- Right-click FEATURE_RESTRICT_FILEDOWNLOAD, click New, and then click DWORD Value.
- Type explorer.exe, and then press ENTER.
- Right-click explorer.exe, and then click Modify.
- Type 1, and then click OK.
- Right-click FEATURE_RESTRICT_FILEDOWNLOAD, click New, and then click DWORD Value.
- Type iexplorer.exe, and then press ENTER.
- Right-click iexplorer.exe, and then click Modify.
- Type 1, and then click OK.
- Right-click FEATURE_RESTRICT_FILEDOWNLOAD, click New, and then click DWORD Value.
- Type ProcessName, and then press ENTER.
- Right-click ProcessName, and then click Modify.
- Type 1, and then click OK.
- On the File menu, click Exit.
Applications that host the
WebBrowser control can take advantage of this security feature control by adding the application process to the registry. You can do this by using the
CoInternetSetFeatureEnabled function. You can add the application process to the registry by using the
CoInternetSetFeatureEnabled function.If an application does not run under this security feature control, the
WebBrowser control behaves the same as in Internet Explorer 6 SP1. When a process is running the security feature control for file download restrictions, the URLACTION_AUTOMATIC_DOWNLOAD_UI URL action flag determines whether the Information Bar is used for file downloads.
Note You may want to update Web sites that contain an image of the download dialog box to reflect the new download dialog box for Windows XP SP2 users. Use the
userAgent property to determine the correct version of the browser.