【ActiveX】实现安全接口

 

转自：http://www.cnblogs.com/carekee/articles/1772201.html

感谢原作者！

ActiveX控件打包成cab后,在脚本中调用中时,要保证控件的安全性才能在你的网页上安全运行,有两种方法来实现这一保证:实现一个名称为IObjectSafe的接口到你的控件。如果IE发现你的控件支持IObjectSafety，它调用 IObjectSafety::SetInterfaceSafetyOptions 方法然后才载入你的控件。另外一种方法需要修改注册表，我将会在另外一篇文章中详细介绍。
1。创建了一个叫做“tryISafeObject.ocx”的MFC ActiveX控件。
2。在tryISafeObjectCtrl.h中定义ISafeObject接口：

 

  1 #include <objsafe.h> // for IObjectSafety; in ActiveX SDK
  2 class CtryISafeObjectCtrl : public COleControl
  3 {
  4  DECLARE_DYNCREATE(CtryISafeObjectCtrl)
  5 //........................................................................
  6 //ISafeObject
  7  DECLARE_INTERFACE_MAP()
  8  BEGIN_INTERFACE_PART(ObjSafe, IObjectSafety)
  9   STDMETHOD_(HRESULT, GetInterfaceSafetyOptions) ( 
 10             /* [in] */ REFIID riid,
 11             /* [out] */ DWORD __RPC_FAR *pdwSupportedOptions,
 12             /* [out] */ DWORD __RPC_FAR *pdwEnabledOptions
 13   );
 14         
 15         STDMETHOD_(HRESULT, SetInterfaceSafetyOptions) ( 
 16             /* [in] */ REFIID riid,
 17             /* [in] */ DWORD dwOptionSetMask,
 18             /* [in] */ DWORD dwEnabledOptions
 19   );
 20  END_INTERFACE_PART(ObjSafe);
 21 //ISafeObject
 22 //........................................................................
 23 。。。。。
 24 };
 25 在objsafe.h头文件中有ISafeObject接口的相关定义
 26 3。在tryISafeObjectCtrl.cpp中ISafeObject接口的相关实现：
 27 //.............................................................................
 28 // Interface map for IObjectSafety
 29 BEGIN_INTERFACE_MAP( CtryISafeObjectCtrl, COleControl )
 30  INTERFACE_PART(CtryISafeObjectCtrl, IID_IObjectSafety, ObjSafe)
 31 END_INTERFACE_MAP()
 32 //.............................................................................
 33 // IObjectSafety member functions
 34 // Delegate AddRef, Release, QueryInterface
 35 ULONG FAR EXPORT CtryISafeObjectCtrl::XObjSafe::AddRef()
 36 {
 37     METHOD_PROLOGUE(CtryISafeObjectCtrl, ObjSafe)
 38     return pThis->ExternalAddRef();
 39 }
 40 ULONG FAR EXPORT CtryISafeObjectCtrl::XObjSafe::Release()
 41 {
 42     METHOD_PROLOGUE(CtryISafeObjectCtrl, ObjSafe)
 43     return pThis->ExternalRelease();
 44 }
 45 HRESULT FAR EXPORT CtryISafeObjectCtrl::XObjSafe::QueryInterface(
 46     REFIID iid, void FAR* FAR* ppvObj)
 47 {
 48     METHOD_PROLOGUE(CtryISafeObjectCtrl, ObjSafe)
 49     return (HRESULT)pThis->ExternalQueryInterface(&iid, ppvObj);
 50 }
 51 const DWORD dwSupportedBits = 
 52   INTERFACESAFE_FOR_UNTRUSTED_CALLER |
 53   INTERFACESAFE_FOR_UNTRUSTED_DATA;
 54 const DWORD dwNotSupportedBits = ~ dwSupportedBits;
 55 //.............................................................................
 56 // CStopLiteCtrl::XObjSafe::GetInterfaceSafetyOptions
 57 // Allows container to query what interfaces are safe for what. We're
 58 // optimizing significantly by ignoring which interface the caller is
 59 // asking for.
 60 HRESULT STDMETHODCALLTYPE 
 61  CtryISafeObjectCtrl::XObjSafe::GetInterfaceSafetyOptions( 
 62   /* [in] */ REFIID riid,
 63         /* [out] */ DWORD __RPC_FAR *pdwSupportedOptions,
 64         /* [out] */ DWORD __RPC_FAR *pdwEnabledOptions)
 65 {
 66  METHOD_PROLOGUE(CtryISafeObjectCtrl, ObjSafe)
 67  HRESULT retval = ResultFromScode(S_OK);
 68  // does interface exist?
 69  IUnknown FAR* punkInterface;
 70  retval = pThis->ExternalQueryInterface(&riid, 
 71      (void * *)&punkInterface);
 72  if (retval != E_NOINTERFACE) { // interface exists
 73   punkInterface->Release(); // release it--just checking!
 74  }
 75  
 76  // we support both kinds of safety and have always both set,
 77  // regardless of interface
 78  *pdwSupportedOptions = *pdwEnabledOptions = dwSupportedBits;
 79  return retval; // E_NOINTERFACE if QI failed
 80 }
 81 /////////////////////////////////////////////////////////////////////////////
 82 // CStopLiteCtrl::XObjSafe::SetInterfaceSafetyOptions
 83 // Since we're always safe, this is a no-brainer--but we do check to make
 84 // sure the interface requested exists and that the options we're asked to
 85 // set exist and are set on (we don't support unsafe mode).
 86 HRESULT STDMETHODCALLTYPE 
 87  CtryISafeObjectCtrl::XObjSafe::SetInterfaceSafetyOptions( 
 88         /* [in] */ REFIID riid,
 89         /* [in] */ DWORD dwOptionSetMask,
 90         /* [in] */ DWORD dwEnabledOptions)
 91 {
 92     METHOD_PROLOGUE(CtryISafeObjectCtrl, ObjSafe)
 93  
 94  // does interface exist?
 95  IUnknown FAR* punkInterface;
 96  pThis->ExternalQueryInterface(&riid, (void * *)&punkInterface);
 97  if (punkInterface) { // interface exists
 98   punkInterface->Release(); // release it--just checking!
 99  }
100  else { // interface doesn't exist
101   return ResultFromScode(E_NOINTERFACE);
102  }
103  // can't set bits we don't support
104  if (dwOptionSetMask & dwNotSupportedBits) { 
105   return ResultFromScode(E_FAIL);
106  }
107  
108  // can't set bits we do support to zero
109  dwEnabledOptions &= dwSupportedBits;
110  // (we already know there are no extra bits in mask )
111  if ((dwOptionSetMask & dwEnabledOptions) !=
112    dwOptionSetMask) {
113   return ResultFromScode(E_FAIL);
114  }        
115  
116  // don't need to change anything since we're always safe
117  return ResultFromScode(S_OK);
118 }

 

posted on 2013-06-27 11:19  崔好好  阅读(616)  评论(0)  编辑  收藏  举报

导航