OCX网络验证修改

由于网页安全限制问题，在网页在运行在客户端是没有一些计算机的控制权限，如访问硬件信息、访问USB设备。我们为得到这样控制我需要给网页加载一个组件在客户浏览器中进行运行。但是我们做了一个OCX让他运行，但是浏览器会提示这个OCX不完全，会让用户对于加载这个OCX有疑虑。即使你进行数字签名也是这样。

这时我们需要让在OCX注册时加入安全脚本申明。代码如下。

h文件声明

#include <OBJSAFE.H>
..class CPMZBRockeyInitCtrl : public COleControl

//imp safe
DECLARE_INTERFACE_MAP()
BEGIN_INTERFACE_PART(ObjSafe, IObjectSafety)
STDMETHOD_(HRESULT, GetInterfaceSafetyOptions) (
/* [in] */ REFIID riid,
/* [out] */ DWORD __RPC_FAR *pdwSupportedOptions,
/* [out] */ DWORD __RPC_FAR *pdwEnabledOptions
);

STDMETHOD_(HRESULT, SetInterfaceSafetyOptions) (
/* [in] */ REFIID riid,
/* [in] */ DWORD dwOptionSetMask,
/* [in] */ DWORD dwEnabledOptions
);
END_INTERFACE_PART(ObjSafe);

...CSSRockeyNetCtrlCtrl.cpp
/////////////////////////////////////////////////////////////////////////////
// IObjectSafety member functions
// Delegate AddRef, Release, QueryInterface
BEGIN_INTERFACE_MAP( CSSRockeyNetCtrlCtrl, COleControl )
INTERFACE_PART(CSSRockeyNetCtrlCtrl, IID_IObjectSafety, ObjSafe)
//INTERFACE_PART(CSSRockeyNetCtrlCtrl, IID_IOleInPlaceActiveObject, OleInplaceActiveObject)
END_INTERFACE_MAP()

ULONG FAR EXPORT CSSRockeyNetCtrlCtrl::XObjSafe::AddRef()
{
METHOD_PROLOGUE(CSSRockeyNetCtrlCtrl, ObjSafe)
return pThis->ExternalAddRef();
}
ULONG FAR EXPORT CSSRockeyNetCtrlCtrl::XObjSafe::Release()
{
METHOD_PROLOGUE(CSSRockeyNetCtrlCtrl, ObjSafe)
return pThis->ExternalRelease();
}
HRESULT FAR EXPORT CSSRockeyNetCtrlCtrl::XObjSafe::QueryInterface( REFIID iid, void FAR* FAR* ppvObj)
{
METHOD_PROLOGUE(CSSRockeyNetCtrlCtrl, ObjSafe)
return (HRESULT)pThis->ExternalQueryInterface(&iid, ppvObj);
}

STDMETHODIMP CSSRockeyNetCtrlCtrl::XObjSafe::GetInterfaceSafetyOptions(
/* [in] */ REFIID riid,
/* [out] */ DWORD __RPC_FAR *pdwSupportedOptions,
/* [out] */ DWORD __RPC_FAR *pdwEnabledOptions
)
{
METHOD_PROLOGUE_EX(CSSRockeyNetCtrlCtrl, ObjSafe)

if (!pdwSupportedOptions || !pdwEnabledOptions)
{
return E_POINTER;
}

*pdwSupportedOptions = INTERFACESAFE_FOR_UNTRUSTED_CALLER | INTERFACESAFE_FOR_UNTRUSTED_DATA;
*pdwEnabledOptions = 0;

if (NULL == pThis->GetInterface(&riid))
{
TRACE("Requested interface is not supported.\n");
return E_NOINTERFACE;
}

// What interface is being checked out anyhow?
OLECHAR szGUID[39];
int i = StringFromGUID2(riid, szGUID, 39);

if (riid == IID_IDispatch)
{
// Client wants to know if object is safe for scripting
*pdwEnabledOptions = INTERFACESAFE_FOR_UNTRUSTED_CALLER;
return S_OK;
}
else if (riid == IID_IPersistPropertyBag
|| riid == IID_IPersistStreamInit
|| riid == IID_IPersistStorage
|| riid == IID_IPersistMemory)
{
// Those are the persistence interfaces COleControl derived controls support
// as indicated in AFXCTL.H
// Client wants to know if object is safe for initializing from persistent data
*pdwEnabledOptions = INTERFACESAFE_FOR_UNTRUSTED_DATA;
return S_OK;
}
else
{
// Find out what interface this is, and decide what options to enable
TRACE("We didn't account for the safety of this interface, and it's one we support...\n");
return E_NOINTERFACE;
}
}
STDMETHODIMP CSSRockeyNetCtrlCtrl::XObjSafe::SetInterfaceSafetyOptions(            /* [in] */ REFIID riid,
/* [in] */ DWORD dwOptionSetMask,
/* [in] */ DWORD dwEnabledOptions)
{
METHOD_PROLOGUE_EX(CSSRockeyNetCtrlCtrl, ObjSafe)

OLECHAR szGUID[39];
// What is this interface anyway?
// We can do a quick lookup in the registry under HKEY_CLASSES_ROOT\Interface
int i = StringFromGUID2(riid, szGUID, 39);

if (0 == dwOptionSetMask && 0 == dwEnabledOptions)
{
// the control certainly supports NO requests through the specified interface
// so it's safe to return S_OK even if the interface isn't supported.
return S_OK;
}

// Do we support the specified interface?
if (NULL == pThis->GetInterface(&riid))
{
TRACE1("%s is not support.\n", szGUID);
return E_FAIL;
}

if (riid == IID_IDispatch)
{
TRACE("Client asking if it's safe to call through IDispatch.\n");
TRACE("In other words, is the control safe for scripting?\n");
if (INTERFACESAFE_FOR_UNTRUSTED_CALLER == dwOptionSetMask && INTERFACESAFE_FOR_UNTRUSTED_CALLER == dwEnabledOptions)
{
return S_OK;
}
else
{
return E_FAIL;
}
}
else if (riid == IID_IPersistPropertyBag
|| riid == IID_IPersistStreamInit
|| riid == IID_IPersistStorage
|| riid == IID_IPersistMemory)
{
TRACE("Client asking if it's safe to call through IPersist*.\n");
TRACE("In other words, is the control safe for initializing from persistent data?\n");

if (INTERFACESAFE_FOR_UNTRUSTED_DATA == dwOptionSetMask && INTERFACESAFE_FOR_UNTRUSTED_DATA == dwEnabledOptions)
{
return NOERROR;
}
else
{
return E_FAIL;
}
}
else
{
TRACE1("We didn't account for the safety of %s, and it's one we support...\n", szGUID);
return E_FAIL;
}
}

这样windows就会认为你这个OCX是安全的。