You can write in a read-only pane on a Web page that uses DHTML in Internet Explorer 7

View products that this article applies to.

Symptoms

In Windows Internet Explorer 7, you can write in a read-only pane on a Web page that uses Dynamic HTML (DHTML). This problem occurs when the following conditions are true:

You have a Web page that uses DHTML to dynamically hide or show text fields.
You have a hidden read-only text field that uses a text field that can be edited.
When you click the text field that can be edited, the read-only text field becomes visible.

Note This problem can be caused by any event on any control that makes the read-only field visible.

↑ Back to the top

Resolution

Security update information

To resolve this problem, install the most current cumulative security update for Internet Explorer. To install the most current updates, visit the following Microsoft Web site:

http://windowsupdate.microsoft.com

For more technical information about the most current cumulative security update for Internet Explorer, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/current.aspx

Note This update was first included in security update 953838 (MS08-045). For more information, click the following article number to view the article in the Microsoft Knowledge Base:

953838� MS08-045: Cumulative security update for Internet Explorer

↑ Back to the top

Workaround

To work around this problem, clear the "Do not save encrypted pages to disk" option.

↑ Back to the top

Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top

More information

Steps to reproduce the problem

Start Notepad, and then paste the following HTML code in a Notepad file:

<html>
<body>

<table>
	<tr>
		<td>
			<Input type='text' onfocusout="hiddenText.style.display='';"/>
		</td>
	</tr>
	<tr>
		<td id='hiddenText' style="display:none">my text</td>
	</tr>
	<tr>
		<td>alter text</td>
	</tr>
	<tr>
		<td>
			<input type='text' />
		</td>
	</tr>
</table>

</body>
</html>