关于IObjectSafety问题请教大牛！

[rainyseason]

ATL控件可通过实现IObjectSafety接口使初始化及脚本安全，以便在IE中使用。
请问MFS控件要实现初始化及脚本安全怎么做呢？请用具体代码说明好吗？
不胜感激！

[rainyseason]

另外很多地方说在注册表中加两项就可以了，真得可以吗？有人实现过吗？
我加了如下项，不行啊！
HKEY_CLASSES_ROOT\CLSID\{9C1E76EE-C2F1-49CF-B5F0-16E8BE124A02}\Implemented Categories]

[HKEY_CLASSES_ROOT\CLSID\{9C1E76EE-C2F1-49CF-B5F0-16E8BE124A02}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}]

[HKEY_CLASSES_ROOT\CLSID\{9C1E76EE-C2F1-49CF-B5F0-16E8BE124A02}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4} ]
请大家帮忙看看了！多谢了！

[AutopVision]

关注！

[rainyseason]

请大家帮忙！
谢谢！

[rainfly99]

MSDM中有例子，你去查一下，不行就[e-mail]

[hongge]

参照以下进行更改，轻松解决。其中中文注释部分是必须加入的。
class CSign :
public IDispatchImpl<ISign, &IID_ISign, &LIBID_SIGNHANDLELib>,
public IObjectSafetyImpl<CSign,INTERFACESAFE_FOR_UNTRUSTED_CALLER |
INTERFACESAFE_FOR_UNTRUSTED_DATA>, // 加入继承ATL 版的
// IObjectSafety接口
public ISupportErrorInfo,
//public IObjectSafety,
public CComObjectRoot,
public CComCoClass<CSign,&CLSID_Sign>
{
public:
DWORD m_dwSafety;
public:
CSign() {}
BEGIN_COM_MAP(CSign)
COM_INTERFACE_ENTRY(IDispatch)
COM_INTERFACE_ENTRY(ISign)
COM_INTERFACE_ENTRY(ISupportErrorInfo)
COM_INTERFACE_ENTRY(IObjectSafety) // 连接IObjectSafety
// 到这个COM map

END_COM_MAP()


//DECLARE_NOT_AGGREGATABLE(CSign)
// Remove the comment from the line above if you don't want your object to
// support aggregation.

DECLARE_REGISTRY_RESOURCEID(IDR_Sign)
// ISupportsErrorInfo
STDMETHOD(InterfaceSupportsErrorInfo)(REFIID riid);
STDMETHOD(GetInterfaceSafetyOptions)(REFIID riid,
DWORD *pdwSupportedOptions,
DWORD *pdwEnabledOptions)//重载虚函数GetInterfaceSafetyOptions
{
ATLTRACE(_T("CObjectSafetyImpl::GetInterfaceSafetyOptions\n"));
if (!pdwSupportedOptions || !pdwEnabledOptions)
return E_FAIL;
LPUNKNOWN pUnk;
if (_InternalQueryInterface (riid, (void**)&pUnk) == E_NOINTERFACE) {
// Our object doesn't even support this interface.
return E_NOINTERFACE;
}else{
// Cleanup after ourselves.
pUnk->Release();
pUnk = NULL;
}
if (riid == IID_IDispatch) {
// IDispatch is an interface used for scripting. If your
// control supports other IDispatch or Dual interfaces, you
// may decide to add them here as well. Client wants to know
// if object is safe for scripting. Only indicate safe for
// scripting when the interface is safe.
*pdwSupportedOptions = INTERFACESAFE_FOR_UNTRUSTED_CALLER;
*pdwEnabledOptions = m_dwSafety &
INTERFACESAFE_FOR_UNTRUSTED_CALLER;
return S_OK;
}else if ((riid == IID_IPersistStreamInit) ||
(riid == IID_IPersistStorage)) {
// IID_IPersistStreamInit and IID_IPersistStorage are
// interfaces used for Initialization. If your control
// supports other Persistence interfaces, you may decide to
// add them here as well. Client wants to know if object is
// safe for initializing. Only indicate safe for initializing
// when the interface is safe.
*pdwSupportedOptions = INTERFACESAFE_FOR_UNTRUSTED_DATA;
*pdwEnabledOptions = m_dwSafety &
INTERFACESAFE_FOR_UNTRUSTED_DATA;
return S_OK;
}else{
// We are saying that no other interfaces in this control are
// safe for initializing or scripting.
*pdwSupportedOptions = 0;
*pdwEnabledOptions = 0;
return E_FAIL;
}
}
STDMETHOD(SetInterfaceSafetyOptions)(REFIID riid,
DWORD dwOptionSetMask,
DWORD dwEnabledOptions)//重载虚函数SetInterfaceSafetyOptions
{
ATLTRACE(_T("CObjectSafetyImpl::SetInterfaceSafetyOptions\n"));
if (!dwOptionSetMask && !dwEnabledOptions)
return E_FAIL;
LPUNKNOWN pUnk;
if (_InternalQueryInterface (riid, (void**)&pUnk) == E_NOINTERFACE) {
// Our object doesn't even support this interface.
return E_NOINTERFACE;
}else{
// Cleanup after ourselves.
pUnk->Release();
pUnk = NULL;
}
// Store our current safety level to return in
// GetInterfaceSafetyOptions
m_dwSafety |= dwEnabledOptions & dwOptionSetMask;
if ((riid == IID_IDispatch) &&
(m_dwSafety & INTERFACESAFE_FOR_UNTRUSTED_CALLER)) {
// Client wants us to disable any functionality that would
// make the control unsafe for scripting. The same applies to
// any other IDispatch or Dual interfaces your control may
// support. Because our control is safe for scripting by
// default we just return S_OK.
return S_OK;
}else if (((riid == IID_IPersistStreamInit) ||
(riid == IID_IPersistStorage)) &&
(m_dwSafety & INTERFACESAFE_FOR_UNTRUSTED_DATA)) {
// Client wants us to make the control safe for initializing
// from persistent data. For these interfaces, this control
// is safe so we return S_OK. For Any interfaces that are not
// safe, we would return E_FAIL.
return S_OK;
}else{
// This control doesn't allow Initialization or Scripting
// from any other interfaces so return E_FAIL.
return E_FAIL;
}
}