New issue
Advanced search Search tips

Issue 731 link

Starred by 18 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Jul 2009
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 3
Type: Bug

Restricted
  • Only users with Commit permission may comment.



Sign in to add a comment

ActiveX support

Reported by jmandu...@gmail.com, Sep 3 2008

Issue description

Product Version      : 0.2.149.27 (1583)
URLs (if applicable) :
Other browsers tested:
Add OK or FAIL after other browsers where you have tested this issue:
     Safari 3: FAIL
    Firefox 3: FAIL
         IE 7: OK

What steps will reproduce the problem?
1. Load a site that runs ActiveX controls (example: http://www.pcpitstop.com/testax.asp)
2.
3.

What is the expected result?
It would be nice if Chrome had the ability to load ActiveX controls.  
Specifically the RDC Web client.

What happens instead?
ActiveX does not load and some features of web pages are inaccessible by 
Chrome.

Please provide any additional information below. Attach a screenshot if 
possible.
 
 
ActiveX is an Internet Explorer proprietary feature. No reason to implement it...
-1 :)
ActiveX is teh only reason I use IE anymore... is it wrong to wish something else
could use it so I could get rid of IE altogether?
Guess I'll need an IE tab add-on like FF has.
ActiveX is the biggest reason why IE is insecure.  No need to implement this. (On 
Firefox, I use the IE Tab extension, which opens IE in a Firefox tab)
-999999 Implementing ActiveX would be stupid.

Comment 6 by conra...@gmail.com, Sep 10 2008

I'm not that exper, but when I try to reach a web site that requires activex to be
installed, with IE7 it works fine while with chrome id diesn't work. Now waht should
in order to use chrome on that web site?
Labels: -area-unknown Area-Misc

Comment 8 by jon@chromium.org, Nov 11 2008

Taking these to triage.

Comment 9 by jon@chromium.org, Nov 11 2008

Labels: -Pri-2 -Area-Misc Pri-3 Area-WebKit Plugins Mstone-X
Status: Available
Given the security concerns around ActiveX we currently only support specific 
plugins.  However, I will leave this bug open for comments.  We are most interested 
in hearing which plugins you need beyond those we currently support.

Comment 10 Deleted

Comment 11 by ncru...@gmail.com, Jan 8 2009

Is that list user editable?

I, for one, use LogMeIn (https://secure.logmein.com/) almost daily. They have a great 
ActiveX control, and a comparable Firefox extension; the Java version is much worse, 
and there's no NPAPI.

ActiveX support, even if hard to configure support on a one-to-one basis (I 
understand the issues at hand), would be a plus.
 Issue 5396  has been merged into this issue.
 Issue 3994  has been merged into this issue.

Comment 14 by goodb...@gmail.com, Jan 12 2009

How much of "greenborder" technologies are implemented within Chrome?  That *may*
make me sleep better at night.

However, I would like a way to absolutely positively turn activex support completely
off, with no way to turn it back on within the running session.

For Conrad and others who want ActiveX - it is an insecure piece of crap, go to the
Risks mailing list (google for "risks" and go into catless site) and search for
Authenticode.  Bob Atkinson, the "architect" for ActiveX basically says that a broken
screen saver had higher priorities within Microsoft during the design and
implementation of ActiveX.  So, years afterwards, they are still playing catch up on
trying to fix security issues in ActiveX.

An ActiveX control, once authorized, has full and complete control of you Windows
environment.  Not only that, once authorized, anyone and anything can call it.  Now,
like it has happened in the past with HP and others - a signed, shipped ActiveX
control is vulnerable to a buffer overflow.  Guess what happens?  Any malicious site
can call that control with a buffer overflow, and *BAM* you're owned.

Unless Microsoft has significantly changed how ActiveX works, this is a serious issue.

JUST SAY NO TO ACTIVEX!
 Issue 8700  has been merged into this issue.

Comment 16 by Deleted ...@, Mar 13 2009

I agree with goodb0fh. 
"However, I would like a way to absolutely positively turn activex support completely
off, with no way to turn it back on within the running session.".

This is my biggest complaint about Google Chrome. 

Comment 17 by *mdu@chromium.org, Mar 13 2009

 Issue 8758  has been merged into this issue.

Comment 18 by gothi...@gmail.com, Mar 13 2009

There are a few NPAPI wrappers, developed by Microsoft, to allow browsers to use ActiveX.
I guess in all real terms, If that's possible then NPAPI is just as vulnerable as
ActiveX.

Anyhow, I personally think there should be an option to enable ActiveX, or for Google
to design an NPAPI wrapper as Microsoft has done.

jd[@at]ozchat[dot.]org

Comment 19 by aedmu...@gmail.com, Apr 24 2009

For Logmein specifically, there is a work-around originally devloped by "BudmanWV" on 
the googlechromeboard (post 492).  Basically, it leverages the Mozilla Firefox 
extensions into Chrome.  It works, but you have to manually update it every time the 
version changes.  (HINT -- Chrome Developers -- It would be nice if this were 
supported)

I've crafted it into a batch file (that you have to update -- see source below).  
It's just a hack, but should get you by until a better method is supported.
The code (verbose) is attached to this message (assuming that it doesn't freak) and 
is also inline after this 



// InstallLogMeInChrome.bat
// -------------------------------------code starts here ------------------
REM - Coded by Edmund.
Set myPrompt=%prompt%
Set Prompt=%prompt%$_
PushD

REM Set ChromeVersionList=1.0.154.36, 1.0.154.48, 2.0.169.1, 2.0.172.6

Set ChromeVersionList=2.0.172.8

echo %ChromeVersionList%

pause


REM - c/o http://www.googlechromeboard.com/post492.html
REM - Re: Using LogMeIn with Google Chrome
REM - BudmanWV ยท 12.17.2008 2:20 pm
REM - To get the plugin working, you'll need access to the Firefox plugin files as 
well as 

some files from the Firefox folder (I am using Firefox 3.04 on Vista). Here is a list 
of 

the files, where I found them, and where I placed them to get the plugin to work. 
Please 

note that if you are using 2000 or XP or a 64-bit version of Windows, the file 
LOCATIONS 

will probably be different but the FILES you need should be the same.
REM - Mozilla Install Folder (e.g. C:\Program Files\Mozilla Firefox):

REM - %SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%

\System32\WindowsPowerShell\v1.0\
REM - Add this to environment path: C:\Program Files\Mozilla Firefox
REM - path=%path%;%ProgramFiles\Mozilla Firefox -- doesn't work by the way. efb.

cd C:\Program Files\Mozilla Firefox\
pause
for %%a in (JS3250.DLL, MOZCRT19.DLL, NSPR4.DLL, NSS3.DLL, NSS3UTIL.DLL, PLC4.DLL, 

PLDS4.DLL, SMIME3.DLL, SQLITE3.DLL, SSL3.DLL, XPCOM.DLL, XUL.DLL) do copy %%a 
%userprofile

%\AppData\Local\Google\Chrome\Application

REM -- Place these files in the folder where the CHROME.EXE is stored (e.g. C:\Users

\Username\AppData\Local\Google\Chrome\Application)
REM - Plugin Folder (in your Firefox Profile folder, e.g. C:\Users\Username\AppData

\Roaming\Mozilla\Firefox\Profiles\xxxxxxx\extensions\LogMeInClient@logmein.com\plugin
s)
cd %Userprofile%\AppData\Roaming\Mozilla\Firefox\Profiles
rem - here it gets tricky, haven't got a hack for changing to the correct 
directory...
cd *.default
cd extensions\LogMeInClient@logmein.com\plugins

REM - This must be the current version of Chrome.  One of the issues, is that the 
version 

changes.

for %%a in (%ChromeVersionList% ) do mkdir %userprofile%\AppData\Local\Google\Chrome

\Application\%%a\Plugins
Rem for %%a in (%ChromeVersionList% ) do if exist %userprofile%\AppData\Local\Google

\Chrome\Application\%%a\null mkdir 
%userprofile%\AppData\Local\Google\Chrome\Application\%

%a\Plugins

REM mkdir %userprofile%\AppData\Local\Google\Chrome\Application\1.0.154.48\Plugins
REM mkdir %userprofile%\AppData\Local\Google\Chrome\Application\2.0.169.1\Plugins

pause
for %%b in (%ChromeVersionList% ) do for %%a in (LMIProxyHelper.exe, npRACtrl.dll, 

ractrlkeyhook.dll, unicows.dll) do copy %%a %userprofile%\AppData\Local\Google\Chrome

\Application\%%b\Plugins
REM for %%a in (LMIProxyHelper.exe, npRACtrl.dll, ractrlkeyhook.dll, unicows.dll) do 
copy 

%%a %userprofile%\AppData\Local\Google\Chrome\Application\1.0.154.48\Plugins
pause
REM --Place these files in a folder named "Plugins" under the 
Chrome\Application\Version 

folder (e.g. C:\Users\Username\AppData\Local\Chrome\Application\1.0.154.36\Plugins)
REM - Please note that I had to create the Plugins folder and then place the files 
inside. 

You'll know you are in the right place to create the Plugins folder if you see 
"Installer" 

and "Locales" and "Resources", etc.
REM - As far as the Chrome PORTABLE VERSION, place the "Firefox" dll files with the 

Chrome.exe file and the plugin files go under the "plugins" folder.
REM - Hope this helps, Budman
pause
Set Prompt=%myPrompt%
REM - You are done.
PopD
// -------------------------------------code starts here ------------------

install LogMeIn Chrome.bat
3.8 KB View Download

Comment 20 by Deleted ...@, Jun 2 2009

Before Chrome, I've always had IE prompt me for ActiveX, and from the 100 times I hit 
NO, 2 are for those addresses whose ActiveX-content I understand and/or need. My vote 
is to keep AX away from Chrome. Nevertheless, if and when it's implemented, a white-
list would be nice for having those pieces of code coming in just for user-listed 
domains.

FK

while ignorance == true {perpetuate('violence','hatred')}
Add ActiveX support for everyone with a parameter to command line, because it's very useful for web 
applications (mostly intranet in a trusted enviroment). 

50% of Business Web Applications use activex to help the front-end because it's very fast. Also ActiveX have 
access to local machine resources and render objects that cannot be rendered in any internet browser 
(Printing, Reporting, BarCode, Authentication, DataGrids etc..) 

Finaly the ActiveX technology is the most usual because it is used by many windows programs.


Status: WontFix
We don't plan for any additional activex support. It doesn't fit in our focus on open 
standards and would be costly to integrate in our security model.

Comment 23 by Deleted ...@, Jul 27 2009

Just a comment...I believe that ActiveX have security problems but...WHAT IF A 
GOVERNAMENTAL WEBSITE THAT I NEED TO GO IN ORDER TO DO ANY MANAGEMENT? SOME OFFICIAL 
PAGES IN MY COUNTRY USES ACTIVEX CONTROLS...SO WHAT I'VE TO DO?

THANKS

Comment 24 by Deleted ...@, Sep 14 2009

Adding Active X Support would not be so much in the wrong direction for those wanting 
OPENESS however adding it would be an additional feature. Many websites from 
publishing companies disseminate supplemental material for students and A LOT of 
those sites are running .NET asp and activeX because MS cuts deals with them. I am 
not going to give up Calculus or Organic Chemistry because Chrome doesn't support it 
and neither will a lot of other people. I consider my self pretty hard core nerd and 
run a linux box, but i still have to keep a Windows Emulator near by because of the 
lack of compatibility on the part of Web Browsers. While it may not be in the 
direction Chrome developers want to take the "InterWEBS" by supporting Microsoft 
architecture, the reality is Microsoft has become a dominate force and does to some 
degree set the standard for a lot of computing protocols (even if they stole the 
ideas from other OS's).

Don't miss the forest for the tress. The MAIN goal is to make Chromium a REPLACEMENT 
for IE and Firefox, not just a cuter supplement. NO ONE would run two browsers if 
they didn't have to. From the looks of this thread I am not the only one having trouble accessing necessary information which leaves me the only alternative of using 
another browser, so before I bog down my swap file Ill close Chromium and open a new 
browser. (Even though I know Chromium has a VERY SMALL footprint, why keep it open if 
its useless to perform the task.)

The best tactic is to Add the support for now to lure away IE users by offering a 
full featured alternative then when IE has lost is dominance Chromium/Chrome OS can 
set the standard for Web 3.0 and its architecture.

Along with ActiveX support a user agent that spoofs not only OS and browser but also 
Compatible MIME applications. For example a user running a Ubuntu Machine with 
Chromium can go to Netflix dot com and spoof it to believe its Running IE with 
SilverLight and WMP instead of Chrome with Moonlight and VLC.

Thank you for your time and consideration,

PRM

Comment 25 by Deleted ...@, Dec 4 2009

I thought I made a pretty compelling argument to change the status of this thread. I 
really feel that if this can be done it will add overall value to the browser and 
increase Chrome's chances of gaining market share.

Comment 26 by zib...@gmail.com, Dec 15 2009

I don't like activex but I strongly recommend to implement them in chrome (as a 
flaggable option) because I've heard MANY people that use them at work or in other 
scenarios (like logmein or other services).
I love chrome as it develops.
But there are 2 things missing:

ActiveX and native RSS reader like ie7.

Comment 27 by Deleted ...@, Dec 21 2009

yes i can work Log me in, in Google Chrome Beta version, i made the changes as said
by following site 
http://lifehacker.com/5180010/enable-user-scripts-in-google-chrome

Comment 28 by Deleted ...@, Dec 21 2009

But i cant do the copy,past operations in Newly updated Logmein version 4.0.0.982.. 

Comment 29 Deleted

Comment 30 by Deleted ...@, Aug 12 2010

ActiveX is also the one reason why IE is popular! Some secure websites require secure ActiveX software to run normal like some Trading Platforms.Without these supports, we may lose something value.
We can't stay in home forever because there are traffic accidents everyday, right?
serious business web applications work with ActiveX because there is no a serious internet development platform and the html controls (which are the same since 1997 - HTML4) is not enough.


I also agree wholeheartedly with DOCTwingKey!

Comment 32 by Deleted ...@, Oct 13 2010

Crystal Reports is used by many, many businesses. The printing function is an activex object. So without activex support, Chrome cannot be used by many companies. Just pointing this out.

Comment 34 by aedmu...@gmail.com, Oct 13 2010

Using IETab, i'm able to run logmein, others (including some apps that use the old java-IE interface. they work, but draw incorrectly.
Project Member

Comment 35 by bugdroid1@chromium.org, Oct 12 2012

Labels: Restrict-AddIssueComment-Commit
This issue has been closed for some time. No one will pay attention to new comments.
If you are seeing this bug or have new data, please click New Issue to start a new bug.
Project Member

Comment 36 by bugdroid1@chromium.org, Mar 11 2013

Labels: -Area-WebKit Cr-Content
Project Member

Comment 37 by bugdroid1@chromium.org, Apr 6 2013

Labels: -Cr-Content Cr-Blink

Sign in to add a comment