INTERNETFEATURELIST enumeration

[This documentation is preliminary and is subject to change.]

Applies to: desktop apps only

Contains the Feature Controls for Windows Internet Explorer.

Syntax

typedef enum _tagINTERNETFEATURELIST {
  FEATURE_OBJECT_CACHING                   = 0,
  FEATURE_ZONE_ELEVATION                   = 1,
  FEATURE_MIME_HANDLING                    = 2,
  FEATURE_MIME_SNIFFING                    = 3,
  FEATURE_WINDOW_RESTRICTIONS              = 4,
  FEATURE_WEBOC_POPUPMANAGEMENT            = 5,
  FEATURE_BEHAVIORS                        = 6,
  FEATURE_DISABLE_MK_PROTOCOL              = 7,
  FEATURE_LOCALMACHINE_LOCKDOWN            = 8,
  FEATURE_SECURITYBAND                     = 9,
  FEATURE_RESTRICT_ACTIVEXINSTALL          = 10,
  FEATURE_VALIDATE_NAVIGATE_URL            = 11,
  FEATURE_RESTRICT_FILEDOWNLOAD            = 12,
  FEATURE_ADDON_MANAGEMENT                 = 13,
  FEATURE_PROTOCOL_LOCKDOWN                = 14,
  FEATURE_HTTP_USERNAME_PASSWORD_DISABLE   = 15,
  FEATURE_SAFE_BINDTOOBJECT                = 16,
  FEATURE_UNC_SAVEDFILECHECK               = 17,
  FEATURE_GET_URL_DOM_FILEPATH_UNENCODED   = 18,
  FEATURE_TABBED_BROWSING                  = 19,
  FEATURE_SSLUX                            = 20,
  FEATURE_DISABLE_NAVIGATION_SOUNDS        = 21,
  FEATURE_DISABLE_LEGACY_COMPRESSION       = 22,
  FEATURE_FORCE_ADDR_AND_STATUS            = 23,
  FEATURE_XMLHTTP                          = 24,
  FEATURE_DISABLE_TELNET_PROTOCOL          = 25,
  FEATURE_FEEDS                            = 26,
  FEATURE_BLOCK_INPUT_PROMPTS              = 27,
  FEATURE_ENTRY_COUNT                      = 28 
} INTERNETFEATURELIST;

Constants

FEATURE_OBJECT_CACHING

Block access to objects instantiated and cached in one domain from another domain.

FEATURE_ZONE_ELEVATION

Prevent non-user initiated navigation between a page in one zone to a page in a higher security zone. This feature, when enabled, can be set differently for each security zone by using the URL action flag URLACTION_FEATURE_ZONE_ELEVATION.

FEATURE_MIME_HANDLING

Check for consistency between the file name extension, the Content-Type value in the HTTP header, the Content-Disposition value in the HTTP header, and the file type that is detected when a file's signature bits are examined, or sniffed. This type of sniff is called a MIME sniff. Files that are determined to have inconsistent information in these areas are renamed and moved to the Internet Explorer cache.

FEATURE_MIME_SNIFFING

Allow the process to determine a file's type by examining its bit signature. Internet Explorer uses this information to determine how to render the file. This feature, when enabled, can be set differently for each security zone by using the URL action flag URLACTION_FEATURE_MIME_SNIFFING.

FEATURE_WINDOW_RESTRICTIONS

Constrain to the viewable desktop area and force to have a status bar. Also, restrict the size and position of pop-up windows without chrome so that they cannot overlay important information on their parent windows and cannot overlay system dialog box information. This feature, when enabled, can be set differently for each security zone by using the URL action flag URLACTION_FEATURE_WINDOW_RESTRICTIONS.

FEATURE_WEBOC_POPUPMANAGEMENT

Enable applications hosting the WebBrowser Control to receive the default Internet Explorer pop-up management behavior.

FEATURE_BEHAVIORS

Allow Binary Behaviors to run securely. This feature, when enabled, can be set differently for each security zone by using the URL action flag URLACTION_BEHAVIOR_RUN.

FEATURE_DISABLE_MK_PROTOCOL

Fail resources hosted on the MK: protocol.

FEATURE_LOCALMACHINE_LOCKDOWN

Apply Local Machine Zone security settings to all local content.

FEATURE_SECURITYBAND

Show the default Internet Explorer Information Bar when file download or code installation is restricted.

FEATURE_RESTRICT_ACTIVEXINSTALL

Block ActiveX controls on pages that instantiate or prompt for ActiveX controls to be installed or when the control is an update to a control that is not installed. This feature, when enabled, can be set differently for each security zone by using the URL action flag URLACTION_AUTOMATIC_ACTIVEX_UI.

FEATURE_VALIDATE_NAVIGATE_URL

Block navigation to any page with a badly formed URL.

FEATURE_RESTRICT_FILEDOWNLOAD

Block file downloads that navigate to a resource, that display a file download dialog box, or that are not initiated explicitly by a user action (for example, a mouse click or key press). This feature, when enabled, can be set differently for each security zone by using the URL action flag URLACTION_AUTOMATIC_DOWNLOAD_UI.

FEATURE_ADDON_MANAGEMENT

Block add-ons that are disabled by the user or group policy so that they do not run or install.

FEATURE_PROTOCOL_LOCKDOWN

Restrict selected protocols from performing URL actions in particular security zones. A list of restricted protocols is maintained for each zone.

FEATURE_HTTP_USERNAME_PASSWORD_DISABLE

Invalidate URL syntax that may include a user name and password (http(s)://username:password@server/).

FEATURE_SAFE_BINDTOOBJECT

Perform additional safety checks when calling IBindHost::MonikerBindToObject to create and initialize ActiveX controls. Specifically, prevent the control from being created if COMPAT_EVIL_DONT_LOAD is in the registry for the control. Also, check the URLACTION_ACTIVEX_OVERRIDE_OBJECT_SAFETY security setting for the zone of the URL being bound to and determine whether the control can be safely initialized.

Note  To avoid the check for specific binds in a process, pass BINDINFO_OPTIONS_SECURITYOPTOUT to BINDINFO.dwOptions when calling IBindStatusCallback::GetBindInfo.

FEATURE_UNC_SAVEDFILECHECK

Evaluate the "saved from url" information for files on a UNC share. This feature increases security on UNC paths but at a performance cost.

FEATURE_GET_URL_DOM_FILEPATH_UNENCODED

Return unencoded file paths for files that use the "file://" protocol scheme.

FEATURE_TABBED_BROWSING

Internet Explorer 7. Enable tabbed browsing shortcuts and notifications.

FEATURE_SSLUX

Internet Explorer 7. Suppress WinInet dialog boxes for SSL errors. For more information, see BINDINFO_OPTIONS_IGNORE_SSLERRORS_ONCE.

FEATURE_DISABLE_NAVIGATION_SOUNDS

Internet Explorer 7. Disable the sounds that are played when the user opens a link.

FEATURE_DISABLE_LEGACY_COMPRESSION

Internet Explorer 7. Deactivate legacy compression architecture, and consolidate manipulation of HTTP data. The new architecture provides consistency between transfer encoding (such as HTTP no-cache headers) and content encoding.

Note  Internet Explorer 9 and later. Legacy compression is no longer available.

FEATURE_FORCE_ADDR_AND_STATUS

Internet Explorer 7. Require new windows to include both address and status bar.

FEATURE_XMLHTTP

Internet Explorer 7. Enable or disable the native XMLHttpRequest object.

FEATURE_DISABLE_TELNET_PROTOCOL

Internet Explorer 7. Disable the built-in telnet protocol handler.

FEATURE_FEEDS

Internet Explorer 7. Enable MIME-sniffing for RSS feeds, and feed auto-discovery.

FEATURE_BLOCK_INPUT_PROMPTS

Internet Explorer 7. Enable or disable the pop-up blocker to show input prompt dialog boxes. Used pop-up blocker to mitigate the risk of spoofing.

FEATURE_ENTRY_COUNT

The total number of items in this enumeration.

Remarks

The INTERNETFEATURELIST enumeration was introduced in Microsoft Internet Explorer 6 for Windows XP Service Pack 2 (SP2), and expanded for Internet Explorer 7.

Applications that host the WebBrowser Control should use the CoInternetSetFeatureEnabled function to enable or disable each feature control.

Requirements

See also

Reference

CoInternetSetFeatureEnabled

CoInternetIsFeatureEnabled

Conceptual

Introduction to Feature Controls

Build date: 3/14/2012