KB Article #101810

What does the File Type "HTML with Active Content" check?

What does the File Type "HTML with Active Content" check?

Summary:

The attachment File Type "HTML with Active Content" checks for the <SCRIPT> tag in the .htm file attachment.

Symptom:

You are trying to block mail messages with .htm attachments that contain active content.

Detailed Information:

Active Content refers to HTML code that contains embedded Javascript or VBScript for client-side execution. Such embedded script is delimited within the .htm file by the <SCRIPT> and </SCRIPT> HTML tags.

The File Type "HTML with Active Content" performs a check for the <SCRIPT> tag in the .htm attachment. If the <SCRIPT> tag is found, the attachment is considered to contain Active Content.

Note that the src parameter in the <SCRIPT> tag is not checked by this File Type. EMF 5.5 and later provides another option to check such strings within tags, like the src parameter -- for example, to check for a particular domain in the src parameter. The new option accomplishes this by simply scanning for selected text strings in non-text attachments. See the EMF 5.5 or later Admin Guide for details