Search code examples
securityinternet-explorer-7security-zone

How IE7 determines a site's Security Zone

Does anyone know how IE7 determines what Security Zone to use for a site? I see the basics for IE6 here, but I can't find the equivalent for IE7.

Solution

  • I could use a little more information to narrow down my answer, but here is what I have:

    Internet Explorer has 5 different security zones be default: Local Machine Zone, Intranet, Internet, Trusted, and Restricted These are determined in urlmon.dll (Url Moniker) More information here: http://msdn.microsoft.com/en-us/library/ms537183(VS.85).aspx

    But you can also implement your own custom security zone: http://msdn.microsoft.com/en-us/library/ms537182(VS.85).aspx

    The way that IE determines the security zones should not have changes between IE6 and IE7 (or IE8 for that matter)

    Intranet sites are determined: 1. By url host names do not have any dots (http://stackoverflow vs http://stackoverflow.com)

    1. Sites from the file:// scheme where the resource is collected from UNC