Web Gateway 7.1.5 Product Guide - McAfee

Web filtering
HTML filtering 6
Embedded Objects
This nested rule set removes Java applets embedded in HTML pages, as well as other embedded media
types if they are on a blocking list.
It is processed in the embedded object cycle when these objects are sent with requests or responses.
Nested library rule set — Embedded Objects
Criteria — Always
Cycle — Embedded objects
The rule set contains the following rules:
Java applets
HTMLElement.Name equals “APPLET” OR (
HTMLElement.Name equals “OBJECT” AND
HTMLElement..HasAttribute (“codetype”) equals true AND
HTMLElement.Attribute (“codetype”) equals “application/java”) –> Remove
The rule uses several HTMLElement ... properties to remove an element from an HTML page if it is
found that particular values are true for these properties. An element is removed if its name is
APPLET or if its name is OBJECT and has a code type attribute with application/java as its value.
Processing of the embedded object cycle stops then and the HTML page is forwarded without the
removed element to the user who requested it or to the web if a user attempted to upload it.
Stop if element is not interesting
(HTMLElement.Name does not equal “OBJECT” AND
HTMLElement.Name does not equal “embed”) OR
HTMLElement.HasAttribute (“type”) equals false –> Stop Rule Set
The rule uses several HTMLElement ... properties to check whether an element needs not be
removed. An element needs not be removed if its name is neither OBJECT nor embed or has no
type attribute at all.
Processing of the rule set stops then, so the rule that removes elements from HTML pages (and
follows this rule in the rule set) is not processed. Processing continues with the next rule set.
Default action for unlisted media types
HTMLElement.Attribute (“type”) is not in list Media Type Whitelist
HTMLElement.Attribute (“type”) is not in list Media Type Blocklist –> Stop Rule Set
The rule uses the HTMLElement.Attribute property to check whether an element is of a type that is
neither on the relevant whitelist nor the blocking list. In this case, a default action is executed,
which for this rule is Stop Rule Set.
Processing of the rule set stops then, so the whilelisting and blocking rules for media types that
follow in the rule set are not processed. Processing continues with the next rule set.
Handle whitelisted media types
HTMLElement.Attribute (“type”) is in list Mediatype whitelist
The rule uses the HTMLElement.Attribute property to check whether the type of an element is on a
media type whitelist. If it is, the rule applies.
Processing of the rule set stops then, so the removing rule that follows this rule in the rule set is
not processed. Processing continues with the next rule set.
Note: This rule is not enabled by default.
McAfee Web Gateway 7.1.5 Product Guide 209