Crystal 2008 Exporting in IE8 and cross-site scripting

[Former Member]

We use Crystal 2008 and IE8, our reports are accessible via the web, the report runs but when exporting in any format, IE blocks the site from down loading. We just upgraded from Crystal XI and this didn't happen. It also does not happen in FireFox or IE9.

For security reason we don't want to disable XSS. Lowering the trusted site level to medium-low let's the file export but we'd rather not.

the exact messages IE produces are:

1. IE blocked this site from downloading files from to your PC. Click here for options.

2. IE has modified this page to help prevent cross-site scripting.

Has anyone ran into this, any ideas? the report was originally written in CRXI and converted to CR2008

thank you

[Former Member · Accepted solution]

if this is an internal ( intranet) site why not make it a trusted site?

[Former Member · Accepted solution]

It's already on the trusted site list (set at medium) it'll export if set at medium-low, which we might have to resort to that. When exporting IE prompt to ok download then nothing, you have to click the export icon a second time, I think the Crystal Viewer is acting up.

[former_member183750 · Accepted solution]

When I look at the message from IE:

IE blocked this site from downloading files from to your PC. Click here for options.

I'm at a loss as to what CR shold be doing herre(?).

- Ludek