After installing MS15-022 update you may not be able to run HTML script under Office context

  • Article

Symptom

After installing MS15-022 update you may not be able to run HTML script under Office context

Cause

This security update opts Microsoft Word, Excel, or PowerPoint into local computer lockdown, a feature control for Internet Explorer, to prevent scripts in Office documents from running with elevated user rights.

Here are documentations which explains this security change:

Microsoft Security Bulletin MS15-022 - Critical

https://technet.microsoft.com/en-us/security/ms15-022

MS15-022: Description of the security update for Microsoft Excel 2010: March 10, 2015 [known Issues Section]

https://support.microsoft.com/en-us/kb/2956142/       
 

Work Around

The workaround is to make the html run in lesser user rights/zone than Local Computer Zone. The Mark of the Web (MOTW) is a feature of Windows Internet Explorer that enhances security. MOTW enables Internet Explorer to force webpages to run in the security zone of the location the age was saved from—as long as that security zone is more restrictive than the Local Machine zone—instead of the Local Machine zone. When you are developing webpages, the MOTW enables you to test your HTML documents in the security zone where you intend the pages to run. Adding the MOTW to your webpages also enables you to fully test their compatibility with users' security settings.

Read more about Mark of the Web from the link below:

https://msdn.microsoft.com/en-us/library/ms537628(v=vs.85).aspx
       

Mark Of the Web - Example 1 :

<html>

<!-- saved from url=(0023)https://www.contoso.com/ -->

<head>

</head>

<body>

 </body>

</head>

Mark Of the Web - Example 2 [Localhost] :

<html>

<!-- saved from url=(0016)https://localhost-->

<head>

</head>

<body>

</body>

</head>

Note: Based on the end users security for Internet zone/Intranet Zone you may have to add the "Saved From url" into security zone

Related Articles:

==========================================================================================

Microsoft Security Bulletin MS15-022 - Critical

https://technet.microsoft.com/en-us/security/ms15-022

MS15-022: Description of the security update for Microsoft Excel 2010: March 10, 2015 [known Issues Section]

https://support.microsoft.com/en-us/kb/2956142/
  

Mark of the Web

https://msdn.microsoft.com/en-us/library/ms537628(v=vs.85).aspx