3

Internet Explorer has a security feature called "Zone Elevation Protection", in which sites outside a list of trusted sites (which can be configured) are not allowed to navigate to the ones on the list.

Is there anything similar to that on Google Chrome? I know a similar protection does exist for treating local files, but can I do something like that for a list of trusted sites? (Even being that a list of SSL-trusted sites?)

1 Answer 1

3

The zone concept first appeared in Internet Explorer 4 (1997). It got prommoted to more prominent status in Internet Explorer 5. It was microsoft's attempt to model the web in discrete steps of trustworthyness/danger. Most other browsers use the white-list(trusted) and black-list(dangerous) method instead of zones.

What Internet explorer is doing is protecting it's zone concept by preventing a dangerous site from redirecting to a trusted site and doing some cross site scripting (XSS) when IE things it is at a trusted site. Really a IE specific XSS defense.

Google Chrome Preferences in the "Under the Hood" tab the "Content Settings..." allows you to set exceptions (white-lists) to the content restriction rules. This is a more fine grained level of control because you can set exceptions on a per site basis rather than for every site defined to be in a particular zone.

1
  • Indeed. I wish Google would put more effort into a good UI for whitelisting javascript, plug-ins, etc.
    – Alex Holst
    Commented Aug 5, 2011 at 13:42

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .