HTML Application: Difference between revisions

Revision as of 19:38, 4 March 2020

Revision as of 19:40, 4 March 2020

Line 51:

===Security considerations===

{{main|Browser security}}

When a regular HTML file is executed, the execution is confined to the security model of the [[web browser]],. thatThis is,means it is confined to communicating with the server, manipulating the page's [[object model]] (usually to validate forms and/or create interesting visual effects) and reading or writing [[HTTP cookie|cookies]].

On the other hand, an HTA runs as a fully trusted application and therefore has more privileges than a normal HTML file; for example, an HTA can create, edit and remove files and [[Windows Registry|registry]] entries. Although HTAs run in this 'trusted' environment, querying [[Active Directory]] can be subject to Internet Explorer Zone logic and associated error messages.