Article ID: 912939 - View products that this article applies to.
This article describes a software update that is available for the Safe HTML filtering feature in Microsoft Exchange Server 2003. This update enables you to use the POST method in HTML forms when you use Microsoft Outlook Web Access in Exchange Server 2003.
The Safe HTML filtering feature in Exchange Server 2003 helps make e-mail messaging safer. When you use Microsoft Outlook Web Access in Exchange Server 2003, the Safe HTML filtering feature helps protect you from malicious scripts that can be included in HTML-formatted e-mail messages or attachments. The following Microsoft Knowledge Base article describes how to work around this filtering feature when you must share files.
899394In Outlook Web Access, you may want to deploy e-mail solutions in which you must include code in e-mail messages. To deploy these e-mail solutions within the constraints imposed by the Safe HTML filtering feature, install the software update that is described in this article. This software update updates the Safe HTML filtering feature so that you can use the POST method in HTML forms.
(http://support.microsoft.com/kb/899394/ )How to share files that are removed by the "Safe HTML" filtering feature in Outlook Web Access for Exchange Server 2003
After you install this software update, you must format the URL in the ACTION parameter as follows:
https://<server FQDN>/formpostdir/safeformpost.aspxThe directory and aspx page must be named as it is here. When the URL is restricted to this format, there is less risk of malicious use of the POST method by unknown external sources.
Download informationThe following file is available for download from the Microsoft Download Center:
Download the Exchange2003-KB912939-x86-ENU.exe package now.
Collapse this imageExpand this image
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
(http://support.microsoft.com/kb/119591/ )How to obtain Microsoft support files from online services
PrerequisitesYou must install Microsoft Exchange Server 2003 Service Pack 2 (SP2) before you install the update.
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/836993/ )How to obtain the latest service packs for Exchange Server 2003
Restart requirementYou do not have to restart the computer after you apply this update. However, the Microsoft Exchange Information Store service and all dependent services will be restarted.
File informationThe global version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Collapse this tableExpand this table
For more information about the terminology that Microsoft uses for software that is corrected after it is released, click the following article number to view the article in the Microsoft Knowledge Base:
824684For more information about the naming schema for Exchange software updates, click the following article number to view the article in the Microsoft Knowledge Base:
(http://support.microsoft.com/kb/824684/ )Description of the standard terminology that is used to describe Microsoft software updates
(http://support.microsoft.com/kb/817903/ )New naming schema for Exchange Server software update packages