View Source Command Is Still Available in Internet Explorer

ID: Q192703

The information in this article applies to:

Microsoft Internet Explorer version 4.01 for Windows 95
Microsoft Internet Explorer version 4.01 for Windows NT 4.0

SYMPTOMS

When you try to use a custom Setup of Internet Explorer created with the Microsoft Internet Explorer Administration Kit and you are using a profile to remove the Source command from the View menu, a user may still be able to view the Hyper Text Markup Language (HTML) source code. This is a potential security breach as it allows users to load other files on the local computer.

RESOLUTION

A supported fix that corrects this problem is now available from Microsoft, but has not been fully regression tested and should be applied only to computers experiencing this specific problem. If you are not severely affected by this specific problem, Microsoft recommends that you wait for the next version of Internet Explorer.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information on support costs, please see the following Microsoft Web site:

   http://support.microsoft.com/support/supportnet/default.asp

NOTE: Before you apply this fix, you must apply Microsoft Internet Explorer 4.01 Service Pack 1 (SP1).

The English version of this fix should have the following file attributes or later:

   Date      Time    Size       File name
   ------------------------------------------------
   06/16/98  11:09a     72,784  Advpack.dll
   08/28/98  03:37p     20,480  Prebind.exe
   08/31/98  10:34a  2,171,664  Shdo95.dll
   08/31/98  11:32a  2,170,640  Shdont.dll
   09/02/98  03:15p  1,393,653  Srx980826601373.zip
   08/28/98  03:37p     21,504  Verinst.exe
   06/16/98  11:09a      2,272  W95inf16.dll
   06/16/98  11:09a      4,608  W95inf32.dll

NOTE: If you contact Microsoft to obtain this fix, a fee may be charged. This fee is refundable if it is determined that you only require the fix you requested. However, this fee is non-refundable if you request additional technical support, if your no-charge technical support period has expired, or if you are not eligible for standard no-charge technical support.

For more information about eligibility for no-charge technical support, see the following article in the Microsoft Knowledge Base:

   ARTICLE-ID: Q154871
   TITLE:      Determining If Your Product Is Eligible for No-Charge
               Technical Support

Additional query words: 4.00 95

Keywords          : kbui msiew95 msient 
Version           : WINDOWS:4.01
Platform          : WINDOWS
Issue type        : kbprb

Last Reviewed: March 18, 1999