<div>If I recall correctly there were suggestions to serve the help pages through a local web server - was that tried and rejected? </div> <div> </div> <div>Thanks,</div> <div>yc<br></div> <div class="gmail_quote">On Fri, May 6, 2011 at 12:57 PM, Eli Barzilay <span dir="ltr"><<a href="mailto:eli@barzilay.org">eli@barzilay.org</a>></span> wrote:<br> <blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote"> <div class="im">Four minutes ago, Jordan Schatz wrote:<br>> This is the only way I am aware of to get IE to automatically run JS<br>> in local files:<br>><br>> <a href="http://technet.microsoft.com/en-us/library/cc749149(WS.10).aspx" target="_blank">http://technet.microsoft.com/en-us/library/cc749149(WS.10).aspx</a><br> > (keep reading, it starts there but the important bit is a couple<br>> paragraphs down)<br><br></div>There are two things there, which both don't work: one is to disable<br>the whole thing, which means that you give up all proection making it<br> a non-solution. The other (the "Mark of the Web" ridiculousness)<br>seemed like a promising direction, but I remember that there were some<br>bad issues with that too.<br><br>[IMO, they could have made things much better by making all local<br> pages behave as if they had that mark thing (which makes it impossible<br>to lead to security issues like reading local files), and only pages<br>that need more access would lead to asking the user for permission.<br>It seems like that would have been easier, since it makes the whole<br> local machine zone lockdown unnecessary...]<br> <div> <div></div></div></blockquote></div>