【ActiveX】实现安全接口

 

转自：http://www.cnblogs.com/carekee/articles/1772201.html

感谢原作者！

ActiveX控件打包成cab后,在脚本中调用中时,要保证控件的安全性才能在你的网页上安全运行,有两种方法来实现这一保证:实现一个名称为IObjectSafe的接口到你的控件。如果IE发现你的控件支持IObjectSafety，它调用 IObjectSafety::SetInterfaceSafetyOptions 方法然后才载入你的控件。另外一种方法需要修改注册表，我将会在另外一篇文章中详细介绍。
1。创建了一个叫做“tryISafeObject.ocx”的MFC ActiveX控件。
2。在tryISafeObjectCtrl.h中定义ISafeObject接口：

 

 1 #include <objsafe.h> // for IObjectSafety; in ActiveX SDK
 2 class CtryISafeObjectCtrl : public COleControl  3 {  4  DECLARE_DYNCREATE(CtryISafeObjectCtrl)  5 //........................................................................  6 //ISafeObject
 7  DECLARE_INTERFACE_MAP()  8  BEGIN_INTERFACE_PART(ObjSafe, IObjectSafety)  9  STDMETHOD_(HRESULT, GetInterfaceSafetyOptions) (  10             /* [in] */ REFIID riid,  11             /* [out] */ DWORD __RPC_FAR *pdwSupportedOptions,  12             /* [out] */ DWORD __RPC_FAR *pdwEnabledOptions  13  );  14         
 15  STDMETHOD_(HRESULT, SetInterfaceSafetyOptions) (  16             /* [in] */ REFIID riid,  17             /* [in] */ DWORD dwOptionSetMask,  18             /* [in] */ DWORD dwEnabledOptions  19  );  20  END_INTERFACE_PART(ObjSafe);  21 //ISafeObject  22 //........................................................................
 23 。。。。。  24 };  25 在objsafe.h头文件中有ISafeObject接口的相关定义  26 3。在tryISafeObjectCtrl.cpp中ISafeObject接口的相关实现：  27 //.............................................................................  28 // Interface map for IObjectSafety
 29 BEGIN_INTERFACE_MAP( CtryISafeObjectCtrl, COleControl )  30  INTERFACE_PART(CtryISafeObjectCtrl, IID_IObjectSafety, ObjSafe)  31 END_INTERFACE_MAP()  32 //.............................................................................  33 // IObjectSafety member functions  34 // Delegate AddRef, Release, QueryInterface
 35 ULONG FAR EXPORT CtryISafeObjectCtrl::XObjSafe::AddRef()  36 {  37  METHOD_PROLOGUE(CtryISafeObjectCtrl, ObjSafe)  38     return pThis->ExternalAddRef();  39 }  40 ULONG FAR EXPORT CtryISafeObjectCtrl::XObjSafe::Release()  41 {  42  METHOD_PROLOGUE(CtryISafeObjectCtrl, ObjSafe)  43     return pThis->ExternalRelease();  44 }  45 HRESULT FAR EXPORT CtryISafeObjectCtrl::XObjSafe::QueryInterface(  46     REFIID iid, void FAR* FAR* ppvObj)  47 {  48  METHOD_PROLOGUE(CtryISafeObjectCtrl, ObjSafe)  49     return (HRESULT)pThis->ExternalQueryInterface(&iid, ppvObj);  50 }  51 const DWORD dwSupportedBits = 
 52   INTERFACESAFE_FOR_UNTRUSTED_CALLER |
 53  INTERFACESAFE_FOR_UNTRUSTED_DATA;  54 const DWORD dwNotSupportedBits = ~ dwSupportedBits;  55 //.............................................................................  56 // CStopLiteCtrl::XObjSafe::GetInterfaceSafetyOptions  57 // Allows container to query what interfaces are safe for what. We're  58 // optimizing significantly by ignoring which interface the caller is  59 // asking for.
 60 HRESULT STDMETHODCALLTYPE  61  CtryISafeObjectCtrl::XObjSafe::GetInterfaceSafetyOptions(  62   /* [in] */ REFIID riid,  63         /* [out] */ DWORD __RPC_FAR *pdwSupportedOptions,  64         /* [out] */ DWORD __RPC_FAR *pdwEnabledOptions)  65 {  66  METHOD_PROLOGUE(CtryISafeObjectCtrl, ObjSafe)  67  HRESULT retval = ResultFromScode(S_OK);  68  // does interface exist?
 69  IUnknown FAR* punkInterface;  70  retval = pThis->ExternalQueryInterface(&riid,  71      (void * *)&punkInterface);  72  if (retval != E_NOINTERFACE) { // interface exists
 73   punkInterface->Release(); // release it--just checking!
 74  }  75  
 76  // we support both kinds of safety and have always both set,  77  // regardless of interface
 78  *pdwSupportedOptions = *pdwEnabledOptions = dwSupportedBits;  79  return retval; // E_NOINTERFACE if QI failed
 80 }  81 /////
 82 // CStopLiteCtrl::XObjSafe::SetInterfaceSafetyOptions  83 // Since we're always safe, this is a no-brainer--but we do check to make  84 // sure the interface requested exists and that the options we're asked to  85 // set exist and are set on (we don't support unsafe mode).
 86 HRESULT STDMETHODCALLTYPE  87  CtryISafeObjectCtrl::XObjSafe::SetInterfaceSafetyOptions(  88         /* [in] */ REFIID riid,  89         /* [in] */ DWORD dwOptionSetMask,  90         /* [in] */ DWORD dwEnabledOptions)  91 {  92  METHOD_PROLOGUE(CtryISafeObjectCtrl, ObjSafe)  93  
 94  // does interface exist?
 95  IUnknown FAR* punkInterface;  96  pThis->ExternalQueryInterface(&riid, (void * *)&punkInterface);  97  if (punkInterface) { // interface exists
 98   punkInterface->Release(); // release it--just checking!
 99  } 100  else { // interface doesn't exist
101   return ResultFromScode(E_NOINTERFACE); 102  } 103  // can't set bits we don't support
104  if (dwOptionSetMask & dwNotSupportedBits) { 105   return ResultFromScode(E_FAIL); 106  } 107  
108  // can't set bits we do support to zero
109  dwEnabledOptions &= dwSupportedBits; 110  // (we already know there are no extra bits in mask )
111  if ((dwOptionSetMask & dwEnabledOptions) !=
112  dwOptionSetMask) { 113   return ResultFromScode(E_FAIL); 114  } 115  
116  // don't need to change anything since we're always safe
117  return ResultFromScode(S_OK); 118 }

 

转载于:https://my.oschina.net/u/926461/blog/350870