StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POOverride IE privacy settings using IInternetSecurityManager in Webbrowser control
text
Body
copied!<p>I need to create a custom security manager for a hosted WebBrowser control in my C# application. The hosted WebBrowser control should be independent from IE security and privacy settings.</p> <p>Problem: If IE privacy settings are set to "High", the websites that depend on cookies don't function properly in hosted WebBrowser control (sites work fine if the privacy setting is set to "Medium").</p> <p>The winform that hosts the WebBrowser control provides below implementation for GetSecurityId, MapUrlToZone and ProcessUrlAction. The ProcessUrlAction gets called by the embedded browser for URL Actions like ACTIVEX_RUN, SCRIPT_RUN; but it's not getting called for any cookie related url actions. </p> <p>Is there some way to enable cookies for webbrowser control? Or is there something wrong with below code?</p> <pre><code>private void InitBrowserSecurityData() { securityID = new byte[MAX_SIZE_SECURITY_ID]; securityID[0] = (byte)'f'; securityID[1] = (byte)'i'; securityID[2] = (byte)'l'; securityID[3] = (byte)'e'; securityID[4] = (byte)':'; securityID[5] = 0; securityID[6] = 3; securityID[7] = 0; securityID[8] = 0; securityID[9] = 0; } //GetSecurityId int IInternetSecurityManager.GetSecurityId(string pwszUrl, IntPtr pbSecurityId, ref uint pcbSecurityId, ref uint dwReserved) { if (pcbSecurityId >= MAX_SIZE_SECURITY_ID) { Marshal.Copy(securityID, 0, pbSecurityId, MAX_SIZE_SECURITY_ID); pcbSecurityId = 9; return HResults.S_OK; } return (int)WinInetErrors.INET_E_DEFAULT_ACTION; } //MapUrlToZone int IInternetSecurityManager.MapUrlToZone(string pwszUrl, out uint pdwZone, uint dwFlags) { pdwZone = (uint)tagURLZONE.URLZONE_LOCAL_MACHINE; return HResults.S_OK; } //ProcessUrlAction int IInternetSecurityManager.ProcessUrlAction(string pwszUrl, uint dwAction, IntPtr pPolicy, uint cbPolicy, IntPtr pContext, uint cbContext, uint dwFlags, uint dwReserved) { URLACTION action = (URLACTION)dwAction; bool hasUrlPolicy = (cbPolicy >= unchecked((uint)Marshal.SizeOf(typeof(int)))); URLPOLICY urlPolicy = (hasUrlPolicy) ? (URLPOLICY)Marshal.ReadInt32(pPolicy) : URLPOLICY.ALLOW; bool hasContext = (cbContext >= unchecked((uint)Marshal.SizeOf(typeof(Guid)))); Guid context = (hasContext) ? (Guid)Marshal.PtrToStructure(pContext, typeof(Guid)) : Guid.Empty; //all URL actions are allowed if (hasUrlPolicy) { urlPolicy = URLPOLICY.ALLOW; Marshal.WriteInt32(pPolicy, (int)urlPolicy); return HResults.S_OK; } return (int)WinInetErrors.INET_E_DEFAULT_ACTION; } </code></pre> <p>I have already seen these questions, but they don't work for me.</p> <p><a href="https://stackoverflow.com/questions/2577386/security-level-for-webbrowser-control">Security Level for WebBrowser control</a></p> <p><a href="https://stackoverflow.com/questions/4996730/custom-iinternetsecuritymanager-not-being-called-with-dialogs">Custom IInternetSecurityManager not being called with dialogs</a></p> <p><a href="https://stackoverflow.com/questions/1498211/overriding-getsecurityid-in-iinternetsecuritymanager">overriding GetSecurityId in IInternetSecurityManager</a></p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload