Locking down RAD Studio internal browser security - security

I use Firefox as my web browser, mostly for access to add-ins such as Flashblock and No-script. I noticed yesterday that the RAD Studio internal browser used for the Welcome Page etc has scripting and Active X etc enabled. Is there a way to disable scripting, or better still, block all access to non-local sources in the built-in browser?

The Delphi IDE uses an embedded Internet Explorer as browser.
If you lock down Internet Explorer, you will lock down the Delphi IDE browser as well.
Note that parts of welcome page in the Delphi IDE need JavaScript.
But you can replace that page if you need to.
--jeroen

Related

How to set default browser for an add-in

I am trying to set default browser for the add-in I am using to chrome, but by default it takes IE always. How do I change this
I assume you are talking about a scenario where your add-in generates a new browser window/popup. On Windows, this will always be Internet Explorer.
Keep in mind that for all Office desktop variants, add-ins are hosted within an embedded browser instance. For Windows machines, this is an embedded Internet Explorer instance. For Mac machines, it uses an embedded Webkit instance. When you open a new window, popup or follow a link it will always be executed within that same instance.

What browser / browser engine do Office Add-ins use?

So I am trying to get started developing Office 365 Add-ins (previously Apps for Office), and I was wondering what browser or browser engine Office uses when it renders your app. I tried using JavaScript's navigator.appCodeName and navigator.appName, but due to the problem described here renders that method useless. What browser or engine do Office Add-ins use to render apps?
It depends on where Office is being used. If it's on Windows Desktop, Office Add-ins use an Internet Explorer to load the hosted webpage in Office. For iOS, it will rely on the native WebView control. If on Office Online, it will use a sandboxed iframe, in which ever browser you open Office Online with.
If you're trying to determine the browser Office is running in, I believe sniffing the user agent string will work for you.

IIS High CPU Usage in Visual Studio 2013

When we use Visual Studio 2013 for web development, we experience the following issues while debugging:
Web application takes a very long time to load
Client scripts take a long time to load
CPU usage by the IIS worker process increases enormously while debugging the application
Changing to a local IIS does not solve these problems.
What's going on here?
According to this site https://www.devexpress.com/Support/Center/Question/Details/T102322
In Microsoft Visual Studio 2013, the Browser Link feature was introduced. It provides dynamic exchange between IDE and any open browser on your machine. With the help of this feature, you can test changes in page markup in browsers on the fly, inspect HTML objects, etc. However, the use of this feature might cause abovementioned problems in the debugging process.
A common solution is to disable Browser Link in Visual Studio:
For me, this was happening because I use Resharper and have a big file oppened (30k lines). I just disable resharper for some specific files.

Opening app from different android Browser

Till now I have been using the default browser with my Samsung Galaxy S2. When Browsing if I found and clicked on a link that was from Wikipedia or IMDB for instance it would ask and give the choice if I wanted to open them in the "Internet" Browser or the installed IMDB/Wikipedia App. I have since tried other Browser Apps. (Firefox, Dolphin, Skyfire, Opera etc) and none of these appear to pop up with the option to open them in an app. They go straight to the website. The only app I have found that does offer the choice is Chrome, but it seems to crash a bit too often. Am just wondering if I am missing something in the the other browsers I have looked at. I like Dolphin and Firefox, but would like to see them offer the option to open sites in installed apps. Is there options to get them to do this? Thanks!
It is because those browsers (Firefox, Dolphin, Skyfire, Opera) you have tested at the end of 2012 don't support or have problems with calling external intents.
Here is the issue about implementation that feature on Firefox.
Related information - how to use intent filters to open external Android app from browser.

How to test my application on older version of IE?

I have installed IE8 on my system. I usually test my application on this browser, but the problem arises when i got to know that the client is using IE7. Now how can i test my application on IE7?
One possible solution is to have dual booting on my system. So on version of Windows i can have IE7 and on another i can have IE8. But i really don't want to use this solution.
Another possible solution is to use PC Emulator [ Don't know what is this, just heard about these ]. Using which i can have multiple IE version simultaneously. Have you ever tried this solution? Please name any good FREE emulator.
Please let me know if there is any other better solution.
you can use
http://www.my-debugbar.com/wiki/IETester/HomePage
and here can you see all browser versions as picture
http://browsershots.org/
I got the solution. :)
In IE8, click on Tools > Developer Tools | or press F12
Then in developer Tools > select the browser mode [ available: IE7, IE8, IE8 with compatibility view ]
This is what i was expecting. :)
Microsoft provides a free set of Windows Virtual PC images for testing various versions of IE on various Windows service packs.
Virtual PC is also free.
Have you ever seen Microsoft Expression Web tool? It contains kick-ass tool for testing pages in various versions of IE - SuperPreview. And this tool also available free, you can download it here.
It's much more easy to use it instead of Virtual PC images. But it can't replace VPC completely because testing in clear environment is also very important.
This is a quick and easy web service solution, good for quick testing.
http://www.browserstack.com/
For those who are still looking for an answer here's a Chrome extension
It has over 6 millions users, and it claims:
Top 10 Chrome extension since 2009!
-- WINDOWS ONLY -- WINDOWS ONLY --
IE Tab exactly emulates IE by using the IE rendering engine directly
within Chrome. This will enable you to use ActiveX controls and test
your web pages with different versions of IE (IE6, IE7, IE8, or IE9).
-- FEATURES --
Create a list of URLs that will automatically open in IE Tab
Group Policy support for enterprise deployments
Securely use the old IE rendering engine
Edit Sharepoint documents instead of opening read-only
Use Java, Silverlight, and ActiveX in Chrome seamlessly
You can also look at Adobe BrowserLab:
http://browserlab.adobe.com
Microsoft has launched Modern.IE to help with this. Go here to download a test image for your preferred OS and visualization software.
http://www.modern.ie/en-us/virtualization-tools#downloads

Resources