But Microsoft has a workaround as well, the key point is load ActiveX controls from external script files. By using document.write, document.createElement or innerHTML, we can bypass this kind of limitation easily.
Refer to this MSDN article for detail.