ActiveX學習筆記二 ActiveX在IE中安全級別問題-實現IObjectSafety介面

http://blog.csdn.net/freedomqx/article/details/4955512

 

使用MFC開發ActiveX控制元件，在IE中會提示安全問題，這個可以通過實現IObjectSafety介面來解決問題

1.首先要包含標頭檔案#include <ObjSafe.h>

2.然後在你的ActiveX標頭檔案中新增

DECLARE_INTERFACE_MAP()

BEGIN_INTERFACE_PART(ObjSafe, IObjectSafety)   


STDMETHOD_(HRESULT,   GetInterfaceSafetyOptions)   (     
/*   [in]   */   REFIID   riid,   
/*   [out]   */   DWORD   __RPC_FAR   *pdwSupportedOptions,   
/*   [out]   */   DWORD   __RPC_FAR   *pdwEnabledOptions   
);   

STDMETHOD_(HRESULT,   SetInterfaceSafetyOptions)   (     
/*   [in]   */   REFIID   riid,   
/*   [in]   */   DWORD   dwOptionSetMask,   
/*   [in]   */   DWORD   dwEnabledOptions   
);   

END_INTERFACE_PART(ObjSafe); 

3.然後在ActiveX對應的cpp檔案中新增，將其中MyActiveCtrl替換成自己的ActiveCtrl類

//介面對映
BEGIN_INTERFACE_MAP(MyActiveXCtrl,COleControl)   
 INTERFACE_PART(MyActiveXCtrl,IID_IObjectSafety,ObjSafe)   
END_INTERFACE_MAP()   

//   IObjectSafety   member   functions   
//   Delegate   AddRef,   Release,   QueryInterface   
ULONG FAR EXPORT MyActiveXCtrl::XObjSafe::AddRef()   
{   
 METHOD_PROLOGUE(MyActiveXCtrl,ObjSafe)   
 return pThis->ExternalAddRef();   
}   

ULONG FAR EXPORT MyActiveXCtrl::XObjSafe::Release()   
{   
 METHOD_PROLOGUE(MyActiveXCtrl,ObjSafe)   
 return pThis->ExternalRelease();   
}   

HRESULT FAR EXPORT MyActiveXCtrl::XObjSafe::QueryInterface(REFIID iid,void FAR* FAR* ppvObj)   
{   
 METHOD_PROLOGUE(MyActiveXCtrl,ObjSafe)   
 return (HRESULT)pThis->ExternalQueryInterface(&iid,ppvObj);   
}   

const DWORD dwSupportedBits = INTERFACESAFE_FOR_UNTRUSTED_CALLER | INTERFACESAFE_FOR_UNTRUSTED_DATA;   
const DWORD dwNotSupportedBits=~dwSupportedBits;   

//   CStopLiteCtrl::XObjSafe::GetInterfaceSafetyOptions   
//   Allows   container   to   query   what   interfaces   are   safe   for   what.   We're   
//   optimizing   significantly   by   ignoring   which   interface   the   caller   is   
//   asking   for.   
HRESULT   STDMETHODCALLTYPE     
MyActiveXCtrl::XObjSafe::GetInterfaceSafetyOptions(     
 /*   [in]   */   REFIID   riid,   
 /*   [out]   */   DWORD   __RPC_FAR   *pdwSupportedOptions,   
 /*   [out]   */   DWORD   __RPC_FAR   *pdwEnabledOptions)   
{   
 METHOD_PROLOGUE(MyActiveXCtrl,ObjSafe)   
 HRESULT   retval   =   ResultFromScode(S_OK);   
 //   does   interface   exist?   
 IUnknown FAR* punkInterface;   
 retval = pThis->ExternalQueryInterface(&riid, (void **)&punkInterface);   
 if(retval!=E_NOINTERFACE) 
 { //   interface   exists   
  punkInterface->Release();   //   release   it--just   checking!   
 }   
 //   we   support   both   kinds   of   safety   and   have   always   both   set, regardless   of   interface   
 *pdwSupportedOptions=*pdwEnabledOptions=dwSupportedBits;   
 return retval;   //   E_NOINTERFACE   if   QI   failed   
}   

/////////////////////////////////////////////////////////////////////////////   
//   CStopLiteCtrl::XObjSafe::SetInterfaceSafetyOptions   
//   Since   we're   always   safe,   this   is   a   no-brainer--but   we   do   check   to   make   
//   sure   the   interface   requested   exists   and   that   the   options   we're   asked   to   
//   set   exist   and   are   set   on   (we   don't   support   unsafe   mode).   
HRESULT   STDMETHODCALLTYPE     
MyActiveXCtrl::XObjSafe::SetInterfaceSafetyOptions(     
 /*   [in]   */   REFIID   riid,   
 /*   [in]   */   DWORD   dwOptionSetMask,   
 /*   [in]   */   DWORD   dwEnabledOptions)   
{   
 METHOD_PROLOGUE(MyActiveXCtrl,   ObjSafe)   
 //   does   interface   exist?   
 IUnknown   FAR*   punkInterface;   
 pThis->ExternalQueryInterface(&riid,   (void   *   *)&punkInterface);   
 if(punkInterface)
 { //   interface   exists   
  punkInterface->Release();   //   release   it--just   checking!   
 }   
 else 
 {   //   interface   doesn't   exist   
  return ResultFromScode(E_NOINTERFACE);   
 }   

 //   can't   set   bits   we   don't   support   
 if(dwOptionSetMask   &   dwNotSupportedBits)  
 {     
  return ResultFromScode(E_FAIL);   
 }   

 //   can't   set   bits   we   do   support   to   zero   
 dwEnabledOptions&=dwSupportedBits;   
 //   (we   already   know   there   are   no   extra   bits   in   mask   )   
 if((dwOptionSetMask&dwEnabledOptions)!=dwOptionSetMask) 
 {   
  return ResultFromScode(E_FAIL);   
 }   
 //   don't   need   to   change   anything   since   we're   always   safe   
 return ResultFromScode(S_OK);   
}

編譯成功後，瀏覽器預設安全級別也不會再報安全問題了

參考：http://topic.csdn.net/t/20020612/20/798933.html