Yes, you got that right. IE 8.0 includes a cross site scripting attack filter that you can take advantage of in your defense in depth plans. Now you can have your browser, in addition to advanced firewalls and SSL VPN gateways such as the ISA/TMG firewall and the IAG 2007 SSL VPN gateway, help protect against this problematic attack.
Check out the IEBlog for more information on how they do this:
http://blogs.msdn.com/ie/archive/2008/09/29/statistical-validation-of-the-ie8-xss-filter.aspx
HTH,
Tom
Thomas W Shinder, M.D., MCSE
Sr. Consultant / Technical Writer
Prowess Consulting www.prowessconsulting.com
PROWESS CONSULTING documentation | integration | virtualization
Email: [email protected]
MVP – Forefront Edge Security (ISA/TMG/IAG)