Re: JavaScript Timeout Setting

["Sandeep Cheema " <51l3n7 () live in>]

Nope. Not recommended at all if you ask me. There are scripts that hang the I.E., the one's that don't are recommended 
for the client side. Increasing the timeout can or may cause incompatibility which you don't want. True that some 
scripts need to be optimized which take a long time to run but that's got very little or nothing to do with the timeout 
thing. MS seems to be pretty good with beta? Believe it or not :-)

Regards, Sandeep
Sent from BlackBerry® on Airtel

-----Original Message-----
From: infosecsmith () s mintemail com
Date: Wed, 17 Aug 2011 21:23:41 
To: <security-basics () securityfocus com>
Subject: JavaScript Timeout Setting

I was curious what you think about setting this option in Internet Explorer.

http://support.microsoft.com/kb/175500

Because some scripts may take an excessive amount of time to run, Internet
Explorer prompts the user to decide whether they would like to continue
running the slow script. Some tests and benchmarks may use scripts that take
a long time to run and may want to increase the amount of time before the
message box appears. In Internet Explorer, the script time-out value can be
changed on specific client machines by modifying a registry entry.


To change this time-out value in Internet Explorer 4.0, 5.0, 6, 7, or 8,
follow these steps:

  1. Using a Registry Editor such as Regedt32.exe, open this key:
  HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Styles

  *Note* If the Styles key is not present, create a new key that is called
  Styles.
  2. Create a new DWORD value called "MaxScriptStatements" under this key
  and set the value to the desired number of script statements. If you are
  unsure of what value you need to set this to, you can set it to a DWORD
  value of 0xFFFFFFFF to completely avoid the dialog.

My thoughts would be its acceptable to extend the Time Out, but not to
completely disable it.

Thoughts?

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------