Webwasher 6.0.1 Anti-Malware User's Guide - McAfee

Content Security
Note that the settings you specify in the HTML pages window for JavaScript
code will also apply to Visual Basic Script code and that the settings you specify
in the scripts windows will also apply to Visual Basic Script code and Visual
Basic for Applications macros.
Furthermore, there is this section on the tab:
• JavaScript
It is described in the following. At the end of this description, the windows
mentioned above are also described.
JavaScript
The JavaScript section allows you to configure actions for JavaScript code
that is potentially malicious. This code may be embedded in Web pages, in
Adobe PDF documents or in HTML e-mails.
The code may be openly hostile, i .e. perform operations that are usually and
primarily performed by hostile mobile code, e. g. usage of vulnerable functionality.
It may also perform only operations that are performed by all kinds of mobile
code, i. e. including code that is not hostile. These operations may, however,
open the door for hostile operations that are performed at a later point of time,
e. g. write access to local files.
You can configure actions with regard to all of these operations.
You can also configure different actions according to whether the probability
that the code in question will perform these operations is medium or high.
If you want to use the options provided in this section, make sure the checkbox
next to the section heading is marked. The checkbox is marked by default.
After modifying this setting or any other setting in this section, click on Apply
Changes to make the modification effective.
Use the drop-down lists in the following areas to configure actions for
JavaScript code:
• Operations primarily performed by hostile mobile
In this area, select actions with regard to the:
— Automation of a local E-Mail client
This operation is used for virus replication.
4–47