Skip to Content
Former Member
Jul 25, 2011 at 11:46 PM

Crystal 2008 Exporting in IE8 and cross-site scripting


We use Crystal 2008 and IE8, our reports are accessible via the web, the report runs but when exporting in any format, IE blocks the site from down loading. We just upgraded from Crystal XI and this didn't happen. It also does not happen in FireFox or IE9.

For security reason we don't want to disable XSS. Lowering the trusted site level to medium-low let's the file export but we'd rather not.

the exact messages IE produces are:

1. IE blocked this site from downloading files from to your PC. Click here for options.

2. IE has modified this page to help prevent cross-site scripting.

Has anyone ran into this, any ideas? the report was originally written in CRXI and converted to CR2008

thank you