如何用vc(atl)编写安全的控件

setp1: 添加atl接口类的继承类

YourInterface.h

class ATL_NO_VTABLE CYourInterface:

 public IObjectSafetyImpl<CYourInterface, INTERFACESAFE_FOR_UNTRUSTED_CALLER

         |INTERFACESAFE_FOR_UNTRUSTED_DATA >

setp2: 添加map

 BEGIN_COM_MAP(CYourInterface)

 COM_INTERFACE_ENTRY(IObjectSafety)

END_COM_MAP()

setp3:再类定义中增加如下两个成员函数即可通过安全注册软件

STDMETHOD(GetInterfaceSafetyOptions)(REFIID riid,

                                  DWORD *pdwSupportedOptions,

                                  DWORD *pdwEnabledOptions)

{

 ATLTRACE(_T("CObjectSafetyImpl::GetInterfaceSafetyOptions/n"));

 if (!pdwSupportedOptions || !pdwEnabledOptions)

  return E_FAIL;

 LPUNKNOWN pUnk;

 if (_InternalQueryInterface (riid, (void**)&pUnk) == E_NOINTERFACE) {

  // Our object doesn't even support this interface.

  return E_NOINTERFACE;

 }else{

  // Cleanup after ourselves.

  pUnk->Release();

  pUnk = NULL;

 }

 if (riid == IID_IDispatch) {

  // IDispatch is an interface used for scripting. If your

  // control supports other IDispatch or Dual interfaces, you

  // may decide to add them here as well. Client wants to know

  // if object is safe for scripting. Only indicate safe for

  // scripting when the interface is safe.

  *pdwSupportedOptions = INTERFACESAFE_FOR_UNTRUSTED_CALLER;

  *pdwEnabledOptions = m_dwCurrentSafety &

   INTERFACESAFE_FOR_UNTRUSTED_CALLER;

  return S_OK;

 }else if ((riid == IID_IPersistStreamInit) ||

  (riid == IID_IPersistStorage)) {

  // IID_IPersistStreamInit and IID_IPersistStorage are

  // interfaces used for Initialization. If your control

  // supports other Persistence interfaces, you may decide to

  // add them here as well. Client wants to know if object is

  // safe for initializing. Only indicate safe for initializing

  // when the interface is safe.

  *pdwSupportedOptions = INTERFACESAFE_FOR_UNTRUSTED_DATA;

  *pdwEnabledOptions = m_dwCurrentSafety &

   INTERFACESAFE_FOR_UNTRUSTED_DATA;

  return S_OK;

 }else{

  // We are saying that no other interfaces in this control are

  // safe for initializing or scripting.

  *pdwSupportedOptions = 0;

  *pdwEnabledOptions = 0;

  return E_FAIL;

 }

}

STDMETHOD(SetInterfaceSafetyOptions)(REFIID riid,

                                  DWORD dwOptionSetMask,

                                  DWORD dwEnabledOptions)

{

 ATLTRACE(_T("CObjectSafetyImpl::SetInterfaceSafetyOptions/n"));

 if (!dwOptionSetMask && !dwEnabledOptions) return E_FAIL;

 LPUNKNOWN pUnk;

 if (_InternalQueryInterface (riid, (void**)&pUnk) == E_NOINTERFACE) {

  // Our object doesn't even support this interface.

  return E_NOINTERFACE;

 }else{

  // Cleanup after ourselves.

  pUnk->Release();

  pUnk = NULL;

 }

 // Store our current safety level to return in

 // GetInterfaceSafetyOptions

 m_dwCurrentSafety |= dwEnabledOptions & dwOptionSetMask;

 if ((riid == IID_IDispatch) &&

  (m_dwCurrentSafety & INTERFACESAFE_FOR_UNTRUSTED_CALLER)) {

  // Client wants us to disable any functionality that would

  // make the control unsafe for scripting. The same applies to

  // any other IDispatch or Dual interfaces your control may

  // support. Because our control is safe for scripting by

  // default we just return S_OK.

  return S_OK;

 }else if (((riid == IID_IPersistStreamInit) ||

  (riid == IID_IPersistStorage)) &&

  (m_dwCurrentSafety & INTERFACESAFE_FOR_UNTRUSTED_DATA)) {

  // Client wants us to make the control safe for initializing

  // from persistent data. For these interfaces, this control

  // is safe so we return S_OK. For Any interfaces that are not

  // safe, we would return E_FAIL.

  return S_OK;

 }else{

  // This control doesn't allow Initialization or Scripting

  // from any other interfaces so return E_FAIL.

  return E_FAIL;

 }

}