When Does IE Block JavaScript Redirects?
A JavaScript redirect is a programming technique that automatically sends a user from one Web page to another. Many trustworthy websites use this technique for a variety of reasons, but hackers and unethical marketers may also use redirects to access your computer or send you to another website. Internet Explorer blocks some JavaScript redirects by default. Learning how to manually enable or disable JavaScript in IE based on your own preferences will improve your Web browsing experience while providing an added layer of security.
Other People Are Reading
-
JavaScript Settings
-
Internet Explorer provides two ways to adjust your JavaScript settings. First, it has default settings, which disable certain JavaScript functions while allowing others. Redirects and most other types of JavaScript are allowed by default. To block more than what the default settings allow, you can customize your settings. You can then disable all JavaScript, including pop-ups, redirects, status bar messages and other scripts. You can also opt to enable some or all JavaScript functions.
Cross-Site Scripting
-
Hackers may redirect you to another website by invading the site you are visiting and inserting a JavaScript redirect. Microsoft gives IE users the ability to block cross-site scripting; in fact, this JavaScript function is disabled by default. You can enable cross-site scripting as well, although this is ill-advised. Unless you have a specific reason to allow cross-site scripting, blocking this function in IE will protect you against potentially dangerous redirects.
-
Adjusting Settings
-
To adjust your own settings, open IE and click "Tools" on the top toolbar. Select "Internet Options" and click on the "Security" tab. If you surf the Internet, choose the "Internet" zone; if you use a company intranet, select that zone. You will see a lever that you can move up and down with your left mouse button. Read the explanation for each security level to determine which level is appropriate for your needs. Click on "Custom Level" and scroll down to the "Scripting" section. You’ll see a general setting to disable "Active Scripting." To disable all redirects, you need to disable this option because no custom setting is available specifically for JavaScript redirects.
To block cross-site redirects that could harm your computer, set the "Enable XSS Filter" to “Enable.” Note that enabling this option will actually block the redirects, but you can allow other JavaScript code to run if you choose "Enable" for the other options.
Site-Specific Settings
-
You can create custom settings for individual websites. For example, you may wish to visit a website but find that you are redirected when you browse to the site. You can add that website to the "Restricted Sites" list to stop JavaScript redirects; conversely, if you want to allow redirects for another website, then you can add it to your "Trusted Sites" list. Choose these zones next to the "Internet" and "Intranet" zone options, and then click "Sites" to add or remove a website. Even for a trusted site, IE enables the XSS filter. You can click "Custom Level" to manually disable the filter, although doing so will make your computer less secure.
-
References
- Photo Credit Creatas Images/Creatas/Getty Images
