Posted by Grant Foraker on March 19, 2009 at 06:52:49:
In Reply to: IE8 posted by Keith Smith on March 18, 2009 at 21:01:23:
--------------------------------------------------------
Tech Bulletin of IE8 - Part II (IE8 Security Feature Enhancement)
Overview
Delete Browsing History Enhancement
InPrivate Browsing
XSS filter
Loosely-Coupled IE
Circular Memory Leak Mitigation
Automatic Crash Recovery (ACR)
References
1. Delete Browsing History Enhancement:
Internet Explorer 7 has a robust Delete Browsing History option that enables
users to delete all browsing history, or to selectively delete temporary
Internet files, cookies, history, form data, and passwords. However, it
doesn't provide an easy way to delete information for certain sites while
preserving it for other sites, such as frequently visited Web sites for
which users likely want their personal preferences and temporary Internet
files to be retained. The enhanced Delete Browsing History feature in
Internet Explorer 8 enables users to do just that.
2. InPrivate Browsing:
InPrivate Browsing is a proactive feature because it lets users or IT
professionals control what is tracked during a browsing session. Once
InPrivate Browsing is started, the user's browsing history, temporary
Internet files, form data, cookies and usernames/passwords are not stored or
retained by the browser, or on the system. The corporate administrator also
has full manageability and control and can use Group Policies to control how
InPrivate Browsing is used in their enterprise
3. XSS filter:
IE8 contains a new feature to detect reflected cross-site scripting (XSS)
vulnerabilities. The XSS Filter operates as an IE8 component with
visibility into all requests / responses flowing through the browser. When
the filter discovers likely XSS in a cross-site request, it identifies and
neuters the attack if it is replayed in the server's response.
4. Loosely-Coupled IE:
In Internet Explorer 7, if one tab crashed, it would crash or hang the
entire browser-including other tabs the user may have had open. In Internet
Explorer 8, the browser's frame and tabs run as separate, isolated
processes-an approach called Loosely-Coupled Internet Explorer (LCIE). LCIE
isolates the browser frame and its tabs and uses asynchronous communication
between components. In this way, if a Web site or add-on causes a tab to
crash or hang, only that tab is affected. The browser itself remains stable
and other tabs remain unaffected, thereby minimizing any disruption or
inconvenience for the user.
5. Circular Memory Leak Mitigation:
Windows Internet Explorer 8 includes improvements to memory management.
These improvements mitigate memory leaks that were previously created by
circular references between Microsoft JScript objects and DOM objects.
6. Automatic Crash Recovery (ACR)
Automatic Crash Recovery (ACR) is a feature of Windows Internet Explorer 8
that can help prevent the loss of work and productivity in the unlikely
event of a browser crash or hang.
Each file can be a maximum of 1MB in length Uploaded files will be purged from the server on a regular basis.