Friday, December 26, 2008

Learn ActiveX from MSDN

I want to learn ActiveX, and these are the collection:

Designing Secure ActiveX Controls
Any Microsoft ActiveX control should be conceived and designed with security in mind.

An ActiveX control can be an extremely insecure way to provide a feature. Because it is a Component Object Model (COM) object, it can do anything the user can do from that computer. It can read from and write to the registry, and it has access to the local file system. From the moment a user downloads an ActiveX control, the control may be vulnerable to attack because any Web application on the Internet can repurpose it, that is, use the control for its own ends whether sincere or malicious. But, you can take precautions when you write a control to help avert an attack.

You have a responsibility to users to provide the most secure controls. Do not assume that your control is secure until it has gone through a rigorous security review. This article contains some guidelines you can incorporate into your security review process.

This article contains information about the following topics:

Security Considerations
How to Judge Control Security
Preventing Repurposing
Related Topics
Security Considerations

1. ActiveX 基础知识中文专题:
http://msdn.microsoft.com/library/chs/default.asp?url=/library/CHS/vccore/html/_core_activex_control_containers.3a_.using_controls_in_a_non.2d.dialog_container.asp

2. BHO 编程指南:
ms-help://MS.MSDNQTR.2003FEB.2052/dnwebgen/html/bho.htm

3. 定制浏览器向导:
ms-help://MS.MSDNQTR.2003FEB.2052/progie/workshop/browser/hosting/wbcustomization.htm

4. 使用 ATL AXHost 承载 ActiveX 控件
ms-help://MS.MSDNQTR.2003FEB.2052/vccore/html/vclrfHostingActiveXControlsUsingATLAXHost.htm

5. The Shell Drag/Drop Helper Object
ms-help://MS.MSDNQTR.2003FEB.2052/dnwui/html/ddhelp_pt1.htm

6. Using ATL 3.0 to Host the Video Control
ms-help://MS.MSDNQTR.2003FEB.2052/directshow_sp1/htm/hostingthevideocontrolinanatlbasedapplication.htm

7. HOWTO: Dynamically Add ActiveX Controls to ATL Composite Control
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbvisualc/en-us/visualc/Q218442.htm

8. HOWTO: Control the Context Menu in an ATL HTML Control
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbie_dev/en-us/ie_dev/Q274202.htm

11.WebBrowser 不可见时不触发 DocumentComplete BUG:
http://support.microsoft.com/kb/q259935/

12.重新发布 Visual C++ ActiveX 控件
http://msdn.microsoft.com/library/chs/default.asp?url=/library/CHS/vccore/html/_core_regular_dlls_dynamically_linked_to_mfc.3a_.overview.asp

13.事件
ms-help://MS.MSDNQTR.2003FEB.2052/progie/workshop/browser/mshtml/tutorials/sink.htm

14. 升级现有的 ActiveX 控件
ms-help://MS.MSDNQTR.2003FEB.2052/vccore/html/_core_Upgrading_an_Existing_ActiveX_Control_to_be_Used_on_the_Internet.htm

15.PRB: TranslateAccelerator() Not Called for ActiveX Controls
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbvisualc/en-us/visualc/Q183167.htm

16.FIX: ActiveX Control Events Are Not Fired in ATL Dialog
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbvisualc/en-us/visualc/Q190530.htm

17. Creating Custom Explorer Bars, Tool Bands, and Desk Bands
ms-help://MS.MSDNQTR.2003FEB.2052/shellcc/platform/shell/programmersguide/shell_adv/bands.htm
23 Designing Secure ActiveX Controls
ms-help://MS.MSDNQTR.2003FEB.2052/activex/workshop/components/activex/security.htm

24. Packaging ActiveX Controls
ms-help://MS.MSDNQTR.2003FEB.2052/activex/workshop/components/activex/packaging.htm

25.COM Objects Overviews and Tutorials
ms-help://MS.MSDNQTR.2003FEB.2052/icom/workshop/components/com/comobj.htm

26.The Windows Internet (WinINet) application programming interface (API)
ms-help://MS.MSDNQTR.2003FEB.2052/wininet/wininet/about_wininet.htm

27.
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbvisualc/en-us/visualc/Q150204.htm

28.HOWTO: Call a Script Method from an ActiveX Script Host
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbvisualc/en-us/visualc/Q222966.htm

29. HOWTO: Add Toolbars and Tooltips to ActiveX Controls
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbvisualc/en-us/visualc/Q194294.htm

30.HOWTO: Draw ActiveX Controls with Child Controls in Design Time
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbvisualc/en-us/visualc/Q198732.htm

31.HOWTO: Adding Tooltips to ATL ActiveX Controls
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbvisualc/en-us/visualc/Q201540.htm

32. PRB: MFC ActiveX Control BLOB Props Missing While Printing in Internet Explorer
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbie_dev/en-us/ie_dev/Q200932.htm

33.HOWTO: Enable ActiveX Control Event Handling on a Web Page
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbie_dev/en-us/ie_dev/Q200839.htm

34.PRB: ActiveX Control Window Is Not Created Until Visible in Internet Explorer
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbie_dev/en-us/ie_dev/Q195188.htm

35. HOWTO: Detect IE's STOP Button Click in ActiveX Control
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbvisualc/en-us/visualc/Q167956.htm

36.HOWTO: Renaming an ActiveX Control After its Project Is Created
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbvisualc/en-us/visualc/Q185695.htm

37.HOWTO: Troubleshoot ActiveX Control Crashes in Internet Explorer
ms-help://MS.MSDNQTR.2003FEB.2052/enu_kbie_dev/en-us/ie_dev/Q247845.htm

38.SAMPLE: AXSH.EXE Demonstrates Implementing ActiveX Script Hosts
http://download.microsoft.com/download/vc60pro/sample3/1/WIN98/EN-US/Axsh.exe

39.OLE 线程模型的说明和工作方式
http://support.microsoft.com/kb/q150777/

40.The COM Programmer's Cookbook
ms-help://MS.MSDNQTR.2003FEB.2052/dncomg/html/msdn_com_co.htm

41. 利用晚期绑定的威力编写您自己的 COM 调用传输
ms-help://MS.MSDNQTR.2003FEB.2052/dntaloc/html/comleverage.htm


44. ActiveX Controls on the Internet
http://msdn2.microsoft.com/en-us/library/d0d6f721.aspx


46. IContextMenu
ms-help://MS.MSDNQTR.2003FEB.2052/shellcc/platform/shell/programmersguide/shell_int/shell_int_extending/extensionhandlers/contextmenuhandlers.htm


MFC Library Reference
ActiveX Control Containers

An ActiveX control container is a container that fully supports ActiveX controls and can incorporate them into its own windows or dialogs. An ActiveX control is a reusable software element that you can use in many development projects. Controls allow your application's user to access databases, monitor data, and make various selections within your applications. For more information on ActiveX controls, see the article MFC ActiveX Controls.

Control containers typically take two forms in a project:

Dialogs and dialog-like windows such as form views, where an ActiveX control is used somewhere in the dialog box.

Windows in an application, where an ActiveX control is used in a toolbar, or other location in the user window.

The ActiveX control container interacts with the control via exposed methods and properties. These methods and properties, which can be accessed and modified by the control container, are accessed through a wrapper class in the ActiveX control container project. The embedded ActiveX control can also interact with the container by firing (sending) events to notify the container that an action has occurred. The control container can choose to act upon these notifications or not.

Additional articles discuss several topics, from creating an ActiveX control container project to basic implementation issues related to ActiveX control containers built with Visual C++:

Creating an MFC ActiveX Control Container

No comments:

Search This Blog

Followers