Toolbar Google Gadgets and Internet Explorer 8 Beta 2
We wanted to advise anyone who uses Google Toolbar Custom Buttons or Google Gadgets and is considering upgrading to Internet Explorer 8 (IE8) Beta 2 to consider holding off for now. Before we explain why, let me tell you that I love using Internet Explorer 8–almost as much as I have Firefox. It’s fast, it’s got great tools and features, and frankly, I feel that it has gotten overshadowed by Google’s recent release of Chrome. This is definitely not the Internet Explorer you’ve known. For once, Microsoft is thinking about the user and I am truly shocked and amazed by the turn around with this product. And I am not the only one who has been impressed by Microsoft’s newest browser. ZDNet noted in a recent review: “We think Microsoft has not only caught up with Opera, Safari, and Firefox, but in some cases even surpasses these other browsers with its innovative new features.”
There are many who will not give Microsoft kudos that they deserve. I know for many it is hard, for whatever historical beef they have, but the truth is Microsoft really does deserve a pat on the back for a “job well done”. There is still lots of work to do, though and it’s not all rainbows and lollipops. There is one area that makes me concerned about this new Internet Explorer 8, and will impact many. The new Internet Explorer 8 Beta 2 (it’s latest version) kills the functionality of Google Toolbar Custom Buttons and Google Gadgets. Below is an example of a Google’s own Google News Toolbar Gadget, stuck perpetually in a loading state:
Let us be clear, however, we are not blaming Microsoft for this issue. This a beta software, much like Google Chrome, which (may we add) can’t even install a Google Toolbar. This is merely a warning that if you install IE8 , you could be faced with a reduced experience even with IE 8’s new “Compatibility Mode”.
We have also uncovered part of what is breaking Google Gadgets. It’s Microsoft’s new “ISS Filter” which comes installed with IE 8, and produces the warning “IE modified this page to prevent a potential cross-site scripting attack”. Microsoft is trying to do something good here. As Microsoft’s David Ross describes it:
XSS vulnerabilities enable an attacker to control the relationship between a user and a web site or web application that they trust. Cross-site scripting can enable attacks such as:
- Cookie theft, including the theft of sessions cookies that can lead to account hijacking
- Monitoring keystrokes input to the victim web site / application
- Performing actions on the victim web site on behalf of the victim user. For example, an XSS attack on Windows Live Mail might enable an attacker to read and forward e-mail messages, set new calendar appointments, etc.
While many great tools exist for developers to mitigate XSS in their sites / applications, these tools do not satisfy the need for average users to protect themselves from XSS attacks as they browse the web.
No one can blame Microsoft for protecting people from harmful script attacks. They are always the first to be blamed for their holes. Unfortunately, with the way this has been implemented, any Google Gadget or Custom Google Toolbar Button Gadget will not function properly.
I don’t know if there is a way for Google or Microsoft to fix this issue, but right now, the only way to access your Google Gadgets is to disable the XSS filter- and that is definitely not recommended. Furthermore, disabling the XSS filter will still not give you access to any custom Google Toolbar button with a gadget function. In the end, you will have to decide how important Google Gadgets are. If Google Gadgets are not a concern, we highly recommend you check out this product. In all other respects, our use of Internet Explorer 8 Beta 2, has been a real treat, without any other major conflict. What has been your experience? Drop us a comment below…
****Update****
For those wanting to go back to Internet Explorer 7, just add/remove Internet Explorer 8 through the control panel. It should bring you back to the previous version of Internet Explorer you were using. Please note, you can only do this if you have not installed SP3.
****Update 2****
Custom Google Gadgets now work in IE 8, but you must download Google Toolbar 5 (the latest version) which you find here The BETA 5 version will not work.
Print This Post
I’m glad I came across this article. I thought it was something just I was experiencing. Thanks for the heads up. I guess back to IE 7 for me!
Can you help me I am running vista home premium Internet explorer 8 does not show up in my control panel so I cant go back to Explorer 7 which I would like to do as I am finding some issues with version 8. is there any other way back.
Thanks
Hi Ian,
Check for “Windows Internet Explorer”.
Great! I am using Google Gadgets a lot, because I am a paying customer of Google Hosted for your domain. There are great gadgets for Email, Calendar, Docs etc.
Microsoft should implement something like trusted sites where the browser allows execution of cross domain scripts. You can download and host many of the gadgets on your own website/servers, if you don’t trust the site where it originates from.
I almost went and uninstalled IE8 Beta 2 via the control panel, but then I saw your note in bold text saying “You can only do this, if you have not installed SP3″… Well, I installed SP3 like most users that use the Microsoft update… what happens, if I uninstall the Beta 2? Breaks the browser? the OS?
What happens, if I install IE7 SP2 from the setup files afterwards again?
If you know the answers and have some tips, I’d appreciate it, because that could save me a lot of trouble (again). Thanks in advance for your time.
I like the build in Developer Toolbar. Some config screens improved a little too, but some are as confusing as always. Why do they still have security settings under advanced settings and not under security settings? … and why do they still have more than one place to enable/disable the popup blocker buried in a place that is hard to find, instead of making it an icon, tiny button or checkbox right on the main interface?
The crash recovery is nice, except if it causes the browser to crash again. A system preservation function for leaking script code is also still missing. It still happens that a page starts looping and using more and more memory, then sucking system resources to bring the whole OS to a halt with the user watching and banging against the keyboard, because you cannot open task manager fast enough and kill IE… I hoped that this problem would have been worth solving, because that is the one that anoys me the most.
p.s. I dared to use the uninstall option, even though you said in your post not to do it. .. then I rebooted and everything seems to be working fine. I am also back to IE7, so the uninstall worked.
I have Windows XP Tablet Edition with SP3, which is pretty much like the Pro edition of XP. I don’t think that this made the difference and work. Mhhh…
We’re glad it worked. I was going off MS’s documentation, but it worked for you, it might be an avenue worth doing, just make sure you back up bookmarks and other important info before you try it!
i love my google gadgets
i should have read this b4 i upgraded to ie8
i’m switching back
lk
@Tony
When I had the ie 7 I had discoverec the ie 8 so ofcorse I down loaded the 8 after turning off my firewall and found out that it was not what I wanted so I had to reinstall 7 which means I had to cut the firewall offf again. I did not have to delete 8 cause 7 just replaced 8.