ActionScript 3.0 :: Loading Crossdomain.xml By Proxy?
Feb 6, 2009I have to load my "crossdomain.xml" using a proxy.how can i do that?
View 0 RepliesI have to load my "crossdomain.xml" using a proxy.how can i do that?
View 0 Replies1st the background - so that you see, that I'm not trying anything malicious: I have a flash app in the russian social network vkontakte.ru which displays user avatars. Until now my .swf file has been hosted at their domain, so that fetching and scaling avatars worked well.Now I'd like to switch my app to an iframe-type, so that the .swf will be hosted at my domain and thus I'm not able to scale the avatars in my .swf anymore: neither my domain, nor "*" are listed in url... and thus the .swf can download and display the avatars, but can't scale them anymore (accessing myLoader.content throws SecurityError).I've decided to write a proxy script in PHP which would fetch the image specified in scripts ?img= parameter and then just pass it to the stdout (after some checks and without storing anything):[code]
But when I fetch it through my proxy script, I don't see that header.Maybe I should better use a different function instead of fopen()? I'm not very proficient in PHP. Also I'm worried if fopen() can be tricked into serving local files from my web server.And as a bonus question: I'm worried that my .swf will be not the only app calling my proxy.php, but I can't figure out a good way to secure it (maybe there is no such way) - I can't store a secret in my .swf and in the .php - because the .swf can be disassembled.
I want to create flash banner with XML content, and host it on my site with crossdomain.xml, and then share banner code with other sites for banner exchange.So, everything is on my server.Will loading banner, on other sites, load XML from my server, if both banner and XML resides on the same server, but banner is loaded on the other site?
View 1 RepliesI'm trying to upload images with Uploadify but I run into IO error. I have gotdemo and it works on my computer, so I decided to implement functionality of my application to this example step by step to catch the error and discovered that the reason of IO error is my local proxy.pac (I use FF):
function FindProxyForURL(url, host) {
if (shExpMatch(host, "*.app.local*")) {
return "PROXY 127.0.0.1:3000";
[code]....
The flash movie in my server (www.mydomain.com) is trying to access data from a different domain (www.otherdomain.com). I've placed the crossdomain.xml in the webroot of the otherdomain. I am getting flash error on accessing the data from otherdomain. When I tracked the HTTP request sent, it shows only one request with URL: https:[url]....
INET_E_SECURITY_PROBLEM.Its clear from this result that IE is not able to load crossdomain.xml file from otherdomain.The same application works in Mozilla Firefox and failing in IE6.
I'm writing a web application using three tier architecture. I have three Amazon EC2 ubuntu servers. The first server handles the presentation of the application and includes my main flash file. The second EC2 instance represents my application server. It contains the AMFPHP files and corresponding web services. Finally, the third instance handles persistance and is running a MySQL database. Both the presentation and application servers are running an apache web server. I created security groups specific to each tier such that the presentation layer will accept all incoming traffic on port 80 while the application layer will only accept incoming traffic from the presentation server. This should allow anyone to request my web application from the presentation server but prevent anyone from accessing the web services on my application server.My flash application cannot make web service calls to my application server. When a request is sent, I never receive a response from the server and eventually receive a security sandbox error.[code]It seemed odd that I wasn't receiving a response, so I decided to try a couple of things:
1. I connected to my presentation tier via ssh and attempted to use lynx to connect to my application server's gateway.php. I was able to connect without any problems.
2. I used Chrome's developer tools window to observe network traffic when loading my site. I found that it is attempting to load the crossdomain.xml file (which resides in the root of my web server [/var/www] on the application tier) using a GET request; but strangely, it times out and fails. This is where I am confused. How come I can use lynx on the same machine to connect to the web server on the application tier but yet the flash app can't access the same file?
While running some tests, I decided to open up the application server instance's firewall such that it can receive http requests from my IP. As soon as I did this, the application being hosted on the presentation tier immediately began working (Received a response from the web service)! However, this means I would have to force my application tier to accept http requests from the internet in order to work, which is not something I want to do. I don't understand why making this change would allow the application to grab the crossdomain.xml file. If the application server's security group is set to accept incoming http requests from the presentation security group, it should have no problem acquiring the crossdomain. xml file residing in the web server root of the application server right? I've spent more time than I would like looking into this issue. I really would like to setup a three-tier environment for my application in which the flash application will be able to send web service requests to my application layer. The most confusing part about this is the fact that when I add my computer's IP address to the application server's firewall, everything seems to magically work as intended. Please correct me if I am setting my application up in the wrong way. I am basing my architecture off of the following:URL..
I have a Windows Server 2003, with a domain: "mydomain.com" and everything goes right until the Flash application tries to load de crossdomain.xml, because it tries to load it from "servername" and obviously the request fails. Currently I have read all about crossdomain.xml , what it is, where it goes although I can not find what I have to do so my flash application requests the crossdomain.xml from my domain "mydomain.com" and not from my server "servername".
- The domain is up and can be accessed from the internet
- The crossdomain is on the root folder and also can be accessed from the internet
I'm trying to display some Facebook video thumbnails in a Flash application, all of the video thumbnails I try to load seem to be hosted at [URL]. However [URL] cannot be loaded (Access Denied). Is there some way around this? (other than loading the images through a proxy). Maybe an alternative url which can be used?
View 2 RepliesI monitor (and log to server) most user errors in our flash game. Quite frequently I see security errors related to trying to make requests to a cross-domain URL (usually the Facebook Graph API). 99% of our players can make these graph API calls with no issues.What I think is going on is that the client makes a request, but fails to load the crossdomain.xml file. I don't quite know how AS3 handles this in the case of a failure to load the crossdomain policy file...will it retry for every URLRequest made until it succeeds in loading it, or does it just give up forever?
View 2 RepliesI am having trouble loading .swf files to my flash app off my cloudstorage account on azure. images and videos load fine but .swf files return this error:
SecurityDomain 'http://localhost/' tried to access incompatible context 'http://[---].blob.core.windows.net/content/swf/Lib_En.swf'
[Code]...
So I need to retrieve XML from a public API, but my app is in Flash and the public service won't implement a crossdomain.xml file. I found this PHP script online (below) for a proxy to request the URL. It works fine for URLs like:
[URL]
but the script seems to either strip or ignore any arguments on the URL, like:
[URL]
I'm PHP ignorant. Is there an easy way to have this script process those URL arguments? Here is the script:
<?php
$post_data = $HTTP_RAW_POST_DATA;
$header[] = "Content-type: text/xml";
$header[] = "Content-length: ".strlen($post_data);
[code]....
Is it possible to use Apache to proxy/tunnel RTMP(S) traffic through to Flash Media Server?Basically, I want to tunnel RTMP traffic using HTTP through Apache.What I want to be able to do is open up an appropriate port (either 80 or 443) on the Apache server and have that proxy traffic through to Flash Media Server. The reason I ask is that I have set-up this scenario but I keep getting a "NetConnection.Connect.Failed" error message; I captured the network traffic flowing between my machine and the server and it is connecting to the server, just nothing happens after that.Do I have to connect directly to Flash Media Server?
View 1 RepliesHow do I get the clientIP from users in my regisrtationforms? It's easy to get the IP with the user isn't using a Proxy, Proxycacade or VPN. But if he uses one of those its difficult. X-Fowarded-For isn't reliable and fails within cascads.
But there are possibilities, because JavaApplets and Flash aren't using the Proxy-Services. How can I archieve to get the clientIP with those technics? I prever to use a small Flash-Code to get the IP from the client, but how to implement?Another way should be a counterpixel which is using IPv6. Most of the proxyservices only support IPv4, can I tell an image only to use IPv6?
I know I can call my server directly from javascript. However, I want to do this through a non-GUI SWF file. I'm fairly new to Flash but have gotten all the CS3 tools from work. Does anyone know of any examples on:
1. how to make a web request from within flash provided the URL, post content, and timeout
2. how to call a Flash API from javascript asynchronously
3. how to detect whether the browser being used can support my SWF (I don't want it to prompt to install Flash if they don't have it yet)
I'm actually hoping someone has already done this and has a sample already built.
I need ActionScript Proxy to be castable to a particular interface.
Here is an example without interface:
public dynamic class Tracer extends Proxy {
flash_proxy override function callProperty(method:*, ... args):* {
trace(method + " " + args)
}
}
[Code]...
I want to use a proxy on the HTML Control found in Adobe AIR.I have tried looking at the AS3 docs on Adobe but honestly, it didn't explain the usage clearly to me and looking at Adobe's example, I can't seem to make out anything off of it.
View 1 RepliesI'm using a PHP proxy script to load images from Facebook into Flash without any sandbox violations. It is taken from the guide here: [URL].. The relevant PHP code is:
[Code]...
The guide mentions that additional security measures are recommended for a real world application. What additional measures would be applicable to this? Maybe some kind of key passed from Flash to PHP?
I realise that there's nothing I can do to completely protect the Flash from being decompiled, but can I prevent the script from being used maliciously?
I've run into a peculiar problem while trying to make use of the Proxy class and override the getProperty() method. I've attached my example class code below:
package
{
import flash.utils.Proxy;
import flash.utils.flash_proxy;
[Code]....
I got a standard php proxy getting images cross domains.
domain/proxy.php?url=http://images.fandango.com/r85.7.3/ImageRenderer/69/103/images/no_image_69x103.jpg/135631/images/masterrepository/fandango/135631/hp7_2-3d imax poster_lo.jpg
[code].....
I'm trying to use JMeter to test our web application and I'd like to use an automated recording of tests but our UI is in flash/flex. Is there any way to get the proxy server to cooperate with the flash/flex? I do have control of both the client and server sides, though rewriting our application to redirect the flash/flex calls to another address isn't really an option. If there were an automated way...
I'm currently testing Windows client and server, but I also need to support testing on Linux client and server. If tests need to be created on one or the other and can be ported to both I could live with that.
I have an AIR app that I need to define a proxy for because the services sit behind a firewall. We are not using BlazeDS so I can't define the proxy settings in the proxy-config.xml file. So, how do I do it? I'm guessing that I'm not the first person who has had to work behind a firewall when accessing data so I'm not sure why I can't find any documentation on the web anywhere about this.AIR says it is supposed to automatically know and use the proxy configuration from your system, i.e. default browser. In there, I don't set a manual proxy, I use the 'automatic configuration' and point it to a .dat file. Could this be where the problem is? Does AIR not know how to understand this?There's no way to set a proxy on an HTTPService component unless you are using Blaze DS or LCDS? Is this true? I'd hate to have to add that to my application just so I can get this accomplished.
View 1 RepliesI am working behind a proxy and some of the flash uploaders out there require me to authenticate myself on the local proxy before allowing me to upload files. I have such an uploader which currently is outside my network. However after it tryes to execute file.upload(request); it dies silently without a trace of what is going on. I presume that it fails because it hasn't requested the proxy auth. How can I show the proxy auth login pop-up. Here's a sample of my code
ActionScript Code:
var request:URLRequest = new URLRequest(this.uploadScript);
request.method = URLRequestMethod.POST;
request.data = new URLVariables();
[code]....
I am trying to build a youtube player with flash and everytime I load a video, there is a runtime security sandbox error..I already put cross domain. xml in my root server URL... but I am still getting the errors...Do I miss something? Do I have to load it into my flex project?[code]
View 1 RepliesI'm trying to implement a dragging system which can only be described as similar to dragging the map on Google Maps. I can set up dragging easily in Flex, but unfortunately the standard model of dragging i.e. dragging an element proxy and dropping it in another element is not what I'm after.
Is there anything built into flex where the actual element rather than a proxy can be repositioned in a different place within the same parent? Or will I have to hand code something using mouse events as you would if implementing a solution in JavaScript?
I have a problem using Flex with BlazeDS on a Tomcat 5.5 through a Proxy (Apache). I already searched for it but didn't find answers which solved my problem. I hope you guys can help me out. Our scenario is the following: Flex-App using BlazeDS to communicate with our Dataservice on a Tomcat 5.5.The Webapp is balze enabled and the services config contains channel definitions like the following:
<channel-definition id="my-amf" class="mx.messaging.channels.AMFChannel">
<endpoint url="http://xxx.xxx.xxx.xxx:8180/myDataService/messagebroker/amf" class="flex.messaging.endpoints.AMFEndpoint">
</channel-definition>
[Code]...
So I have a PHP proxy that gets information from a website. Let's say the proxy gets the information from (www.example.com). It checks if the number of lines returned is the same as before, if not then there are more lines, it counts the difference then it need to push this information to the Flex client saying that it has new information, (x) more lines have been written.I am not really sure how to do the push mechanism on the php proxy because I am not sure how to actually push from the proxy to the client, never done it before.
View 2 RepliesAfter reading James Ward's post I'm considering using a proxy rather than a crossdomain.xml file. I have a java app, which includes a flex applet, on one tomcat instance and a java web service on another tomcat instance. Does it make sense to have a single (Apache httpd) proxy handle requests for both the app and the web service, thus eliminating the cross domain restriction?how to deal with the cross domain issue are welcome.
View 2 RepliesI asked Google. But there is no working answer for it. I checked "right click -> global setings" and found no proxy setting in [URL].. Can anyone know how to configure proxy settings for flash player?
View 1 RepliesI am having some issues trying to make an AIR application connect to a RemoteObject when the application is run in a domain that has proxy servers for outbound connection.The error provided is as below:
[RPC Fault faultString="Send failed" faultCode="Client.Error.MessageSend" faultDetail="Channel.Connect.Failed error NetConnection.Call.Failed: HTTP: Failed: url: 'http://myTestService.org:8080/default/message/amf'"]
explain me briefly what is proxy server and what does it do
View 1 Replies