XML Client Security

 

This topic describes how you can use Microsoft XML Core Services (MSXML) and the security zones of Microsoft Internet Explorer.

The security scheme for MSXML is based on Internet Explorer security zones and settings. The Access data sources across domains setting allows the user three options: Disable, Enable, or Prompt. The following are the four security zones and their defaults for the Access data sources across domains setting.

Internet
Disable

Local intranet
Prompt

Trusted
Enable

Restricted
Disable

If a user loads a page in the Local intranet zone that uses MSXML to access data from another site in the Local intranet zone, the user will be prompted that data is being accessed across domains.

Access is denied if either of the following cross-protocol access is attempted:

  • https to http access

  • http to https access

Cross-zone access of data is permitted only in cases in which more trusted zones access data from less trusted zones. This allows intranet applications to access data on the intranet and Internet.

The following table describes which zones have access to other zones when the Access data sources across domains setting is set to Enable or Prompt.

To Zone
From ZoneLocalInternetLocal IntranetTrusted SitesRestricted Sites
LocalAccess GrantedAccess GrantedAccess GrantedAccess GrantedAccess Denied
InternetAccess DeniedAccess GrantedAccess DeniedAccess DeniedAccess Denied
Local IntranetAccess DeniedAccess GrantedAccess GrantedAccess DeniedAccess Denied
Trusted SitesAccess DeniedAccess GrantedAccess GrantedAccess GrantedAccess Denied
Restricted SitesAccess DeniedAccess DeniedAccess DeniedAccess DeniedAccess Denied
System_CAPS_ICON_note.jpg Note

Although Local is not one of the four security zones, the parser treats files on the local computer as if they are in their own zone.

Show: