如何用vc(atl)编写安全的控件

最新推荐文章于 2022-03-31 12:58:48 发布

fangweihao007

最新推荐文章于 2022-03-31 12:58:48 发布

阅读量830

点赞数

分类专栏： vc 文章标签： scripting interface object initialization null class

本文链接：https://blog.csdn.net/fangweihao007/article/details/79029

版权

vc 专栏收录该内容

2 篇文章 0 订阅

订阅专栏

setp1: 添加atl接口类的继承类

YourInterface.h

class ATL_NO_VTABLE CYourInterface:
public IObjectSafetyImpl<CYourInterface, INTERFACESAFE_FOR_UNTRUSTED_CALLER
|INTERFACESAFE_FOR_UNTRUSTED_DATA >

setp2: 添加map

BEGIN_COM_MAP(CYourInterface)
COM_INTERFACE_ENTRY(IObjectSafety)
END_COM_MAP()

setp3:再类定义中增加如下两个成员函数即可通过安全注册软件

STDMETHOD(GetInterfaceSafetyOptions)(REFIID riid,
                                  DWORD *pdwSupportedOptions,
                                  DWORD *pdwEnabledOptions)
{
ATLTRACE(_T("CObjectSafetyImpl::GetInterfaceSafetyOptions/n"));
if (!pdwSupportedOptions || !pdwEnabledOptions)
  return E_FAIL;
LPUNKNOWN pUnk;
if (_InternalQueryInterface (riid, (void**)&pUnk) == E_NOINTERFACE) {
  // Our object doesn't even support this interface.
  return E_NOINTERFACE;
}else{
  // Cleanup after ourselves.
  pUnk->Release();
  pUnk = NULL;
}
if (riid == IID_IDispatch) {
  // IDispatch is an interface used for scripting. If your
  // control supports other IDispatch or Dual interfaces, you
  // may decide to add them here as well. Client wants to know
  // if object is safe for scripting. Only indicate safe for
  // scripting when the interface is safe.
  *pdwSupportedOptions = INTERFACESAFE_FOR_UNTRUSTED_CALLER;
  *pdwEnabledOptions = m_dwCurrentSafety &
   INTERFACESAFE_FOR_UNTRUSTED_CALLER;
  return S_OK;
}else if ((riid == IID_IPersistStreamInit) ||
  (riid == IID_IPersistStorage)) {
  // IID_IPersistStreamInit and IID_IPersistStorage are
  // interfaces used for Initialization. If your control
  // supports other Persistence interfaces, you may decide to
  // add them here as well. Client wants to know if object is
  // safe for initializing. Only indicate safe for initializing
  // when the interface is safe.
  *pdwSupportedOptions = INTERFACESAFE_FOR_UNTRUSTED_DATA;
  *pdwEnabledOptions = m_dwCurrentSafety &
   INTERFACESAFE_FOR_UNTRUSTED_DATA;
  return S_OK;
}else{
  // We are saying that no other interfaces in this control are
  // safe for initializing or scripting.
  *pdwSupportedOptions = 0;
  *pdwEnabledOptions = 0;
  return E_FAIL;
}
}

STDMETHOD(SetInterfaceSafetyOptions)(REFIID riid,
                                  DWORD dwOptionSetMask,
                                  DWORD dwEnabledOptions)
{
ATLTRACE(_T("CObjectSafetyImpl::SetInterfaceSafetyOptions/n"));
if (!dwOptionSetMask && !dwEnabledOptions) return E_FAIL;
LPUNKNOWN pUnk;
if (_InternalQueryInterface (riid, (void**)&pUnk) == E_NOINTERFACE) {
  // Our object doesn't even support this interface.
  return E_NOINTERFACE;
}else{
  // Cleanup after ourselves.
  pUnk->Release();
  pUnk = NULL;
}
// Store our current safety level to return in
// GetInterfaceSafetyOptions
m_dwCurrentSafety |= dwEnabledOptions & dwOptionSetMask;
if ((riid == IID_IDispatch) &&
  (m_dwCurrentSafety & INTERFACESAFE_FOR_UNTRUSTED_CALLER)) {
  // Client wants us to disable any functionality that would
  // make the control unsafe for scripting. The same applies to
  // any other IDispatch or Dual interfaces your control may
  // support. Because our control is safe for scripting by
  // default we just return S_OK.
  return S_OK;
}else if (((riid == IID_IPersistStreamInit) ||
  (riid == IID_IPersistStorage)) &&
  (m_dwCurrentSafety & INTERFACESAFE_FOR_UNTRUSTED_DATA)) {
  // Client wants us to make the control safe for initializing
  // from persistent data. For these interfaces, this control
  // is safe so we return S_OK. For Any interfaces that are not
  // safe, we would return E_FAIL.
  return S_OK;
}else{
  // This control doesn't allow Initialization or Scripting
  // from any other interfaces so return E_FAIL.
  return E_FAIL;
}
}