Ant wrote:


>> - Aside from the policies, some controls are ultimately trusted and can
>> always be instantiated. Just take a look at the source code of MSIE's
>> internal error webpages...
>
> Error messages (e.g. 404) don't appear in my IE without OK-ing an
> ActiveX prompt.


Interesting. How did you get such a configuration?

> I don't know why a search would be made when all automatic object
> creation is disallowed in all zones.


Because the implementation is somewhere between stupid and broken.
Instantiation already happens before it tries to apply its policies.

>> But IE has other issues as well, like f.e. boundary errors in the CSS parser.
>
> I'll have to look into this further.

http://web.archive.org/web/200306260...base/ie6crash/
http://web.archive.org/web/200306260...ase/ie6crash2/

reliably crash a fully up-to-date Internet Explorer 7. No news, I reported
these to Microsoft back in 2004; about the time when I stopped caring for MSIE.