Is there a change in the policy file required for Flash Player 10 ? I have it setup so that when my (home-brewed) server receives "<policy-file-request/>" I send back the xml data, which worked perfectly with Flash Player 9, but does not work with 10.Does the policy file itself need to be changed or can I no longer send it the way I am (and instead use that port 843 method) ?
View 2 RepliesBasically I'm using Flash to connect to a Java server.Despite my Java application replying to the <policy-file-request/>, in the Flash debug log it lists (not sure about the order as there are lots):
Security Sandbox Violation *
Connection to 192.168.1.86:4049 halted
Warning: Timeout on
[code].....
So, this is a copy of another post I made, but I get a sneaking suspicion I put the post in the wrong forum:[URL]..The summary:
The Socket class in flash player sometimes, for some users (across all sorts of OS and Browsers) will not ask for the policy file from port 843 first, but instead will go straight to the port of the outgoing request, which in this case is our game server, who doesn't really understand the request.
In every case so far the user *is* using the latest version of flash too, so it's not an issue without outdated policy methods, which would have been my first guess.For most people it works just fine, but I posted a log in the thread for one of the non-working players. It's pretty mysterious, and I haven't found a fix yet... though I'm going to experiment with some work arounds.
I'm really sick and tired of facebook's crossdomain.xml , finally got it working for loading pictures from the server. Now I need to load variables from my app using flash. I'm getting this error.
[Code]...
Has anyone been able to successfully implement a service to serve the required socket policy file to FlashPlayer?I am running the Python implementation of the service provided by Adobe at
[URL]
and using the following policy file:
<?xml version="1.0" encoding="UTF-8"?>
<cross-domain-policy>
<site-control permitted-cross-domain-policies="master-only"/>
<allow-access-from domain="*" to-ports="*" secure="false"/>
</cross-domain-policy>
[code]....
Anyone know if it is possible to keep a MASTER crossdomain policy file in a subdirectory of the domain?url...I know you can do it with a meta policy file, but I want to do it with the MASTER because without a master the meta's are ignored.I've googled this for hours and read through the official spec several times and come up with nothing. With the server I want to do this on its possible to deploy in any subdirectory except the domain root - thats just the constraints I'm under.
View 6 RepliesI monitor (and log to server) most user errors in our flash game. Quite frequently I see security errors related to trying to make requests to a cross-domain URL (usually the Facebook Graph API). 99% of our players can make these graph API calls with no issues.What I think is going on is that the client makes a request, but fails to load the crossdomain.xml file. I don't quite know how AS3 handles this in the case of a failure to load the crossdomain policy file...will it retry for every URLRequest made until it succeeds in loading it, or does it just give up forever?
View 2 RepliesI making a game leaderboard on facebook. I'm not using connect but working inside the canvas. When I try to load the images from facebook it gives me the following error.
SecurityError: Error #2122: Security sandbox violation: Loader.content: http://test cannot access http://profile.ak.fbcdn.net/v22941/254/15/q652310588_2173.jpg A policy file is required, but the checkPolicyFile flag was not set when this media was loaded.
[Code]...
I'm using flash sockets to build an embedded chat application. everything works great. I want to allow all the sites who embedded this application to connect to my server, except for some sites.
My problem is that the number of sites that I don't want to connect to my server is a very large one( 4-5k). Currently from what I seen all you can do is tell in your policy file the domains that you allow/not allow.
What I'm looking for is a way for flash player to send me the domain where the flash is embedded and I could return an accept/decline response. I know I can send info about the site where the flash is embedded using actionscript, but this can be very easy simulated.
I have a slight problem when publishing to Flash Player 7 but works perfectly in Flash Player 6, below is the code:[code]In short this creates a list where the values are kept in SharedObject.I need to use a WebService so I require Flash Player 7, as I said this works as expected in Flash Player 6, so maybe someone may know a pitfall or two when migrating code form 6 to 7?
View 1 Repliesmy exit bttn in swf file using swf player for android doesnt work using fscommand. How?
View 2 RepliesCan someone point me to the right direction please? I have a video asset that is streamed from rtmp. Say, url is: [URL]..I need to invoke BitmapData.draw() on this asset.
There is crossdomain.xml file on http://blah.domain.com/crossdomain.xml that allows all the domains.
When is instantiate stream I write: stream.checkPolicyFile = true;
[Code]...
I have 2 applications which I wrote in ActionScript 3.0 as client and C#.net as server. These are basic chat applications. Also I have a test website which is running under the same machine with chat server application.
Server application is listening 289 port, flash application connecting to server with domain and 289 port, it can talk with server during working on Flash. But when I put the flash in a html page, the socket connection is breaking after a while because of security reasons.
I know that is necessary to put a crossdomain.xml file on target website's root folder. The problem is here: Yes, there is a crossdomain.xml file like this:[URL]...
If I have my .swf files on "SERVER A" and they need to access my video files on "FMS SERVER B", on which server to I need to put a cross-domain policy file?
View 2 RepliesI'm loading in profile images from both facebook and twitter into a flex application. Based on the answer from this question, I'm loading the domain policy from the redirected url. However, now I'm seeing this error: Error: [strict] Ignoring policy file at [URL] The crossdomain.xml file from that URL looks like this:
[Code]...
The error states that there is a missing Content-Type. How do I get around this? I, obviously, can't update facebook's files.
I am working on a program that interfaces with a lab view program and used a very basic socket protocol to send and recive data. and i need to bypass the whole <policy-file-request/> bit when it comes to data sending and reciving. . How am i to do this?
my data sending code is:
<mx:Script>
<![CDATA[
[code]......
I have a chat server written in Java listening on port 6000 and a client app(using an xmlsocket) in Flash 9. I get these <policy-file-request/>. I understand the purpose and I read the one solution about creating a server on port 843 and serving a master policy file but since I do not have total control over our hosting I cannot use port 843.I also tried replying to the request with "<cross-domain-policy><allow-access-from domain='*' to-ports='*'/></cross-domain-policy>" + "�" but nothing happens.The other really strange thing is that using Firefox the file request waits for the response and does nothing...but in IE7 the file request goes through then it continues to work even with no response, I can send/receive using the socket without problem.Does anyone know a good way to 'satisfy' the file request using the Java server listening on port 6000?
View 5 RepliesI'm accessing a server's sockets from the flash client using Flash CS3 professional.However, should I run it in debug mode OR run the .swf file, it doesn't connect.Fine, it's the crossdomain.xml file.I create and host this file using apache webserver, and it is accessible using firefox/ie.loadPolicyFile seems to work, BUT IT DISCONNECTS IMMEDIATELY.What am I doing wrong??
<cross-domain-policy>
<allow-access-from domain="*" to-ports="3300"/>
<allow-access-from domain="*" to-ports="3333"/>
[code].....
How do I write a cross domain policy file which will allow an xml file from [URL] and from [URL]? The only cross domain policy files I've ever used use * as allowable domains I don't want to do this.
View 1 RepliesI'm trying to evaluate whether Flex can access binary sockets. Seems that there's a class calles Socket (flex.net package). The requirement is that Flex will connect to a server serving binary data. It will then subscribe to data and receive the feed which it will interpret and display as a chart. I've never worked with Flex, my experience lies with Java, so everything is new to me. So I'm trying to quickly set something simple up. The Java server expects the following:
DataInputStream in = .....
byte cmd = in.readByte();
int size = in.readByte();
byte[] buf = new byte[size];
in.readFully(buf);
[Code] .....
After that - EOFException happens on the server and that's it. So the question is, am I approaching whole streaming data issue wrong when it comes to Flex? Am I sending the policy file wrong? Unfortunately, I can't seem to find a good solid example of how to do it. It seems to me that Flex can do binary Client-Server application, but I personally lack some basic knowledge when doing it. I'm using Flex 3.5 in IntelliJ IDEA IDE.
First off: This is not another question about how to load a policy file.I have an app in development that connects to a socket server, gets the policy file and works just dandy.when the socket server is down for whatever reason, I need to gracefully fallback to an alternative method of getting messages from the server (polling,
[Code]...
I have created a flex app that uses sockets. I published the flex app in a web application that runs on glassfish server. Now from that flex app i create a socket connection to a C# server and start sending/receiving data.The problem is that after i create the socket connection to C# server the flex app first checks the policy file, and after it get's it, it closes the socket, without keep the connection alive.[code] Now after i create the connection and it gets the policy from server it closes this socket, so to be able to use this connection i have to call again [code]After i do this, i can use normally the connection
View 1 RepliesRunning my Flash app from localhost (in debug) I can connect/contact the socket server just fine. Note: It doesn't seem as though the server detects any 843 connection (e.g. the policy file port) this way. However, when I move the app to the server itself and run it from there (i.e. from the website), it will send the policy file, get a disconnect (as it should), and then try to execute the regular port stuff but doesn't read anything from Flash. It seems like my Flash app isn't writing to the port as it should, or something else is going wrong. I did also notice that Flash seems to be trying to send the policy-file-request twice.My process right now is like this:
1) Flash tries to connect to port 843. The server responds to its <policy-file-request/> with the policy file.
2) Flash reads it, disconnects from 843
3) Server gets graceful disconnect, then gets another connection on 843.
4) Just after that, the server gets a connection on 2188, but reads another <policy-file-request/>, so sends the policy file again.
5) At this point, Flash SHOULD simply write the string "Test" to the socket (that's in my connect handler). However, my server doesn't seem to read anything on the socket after the second <policy-file-request/>.[code]
I am attempting to setup a binary socket connection between flash running on my desktop and a Rabbit RCM3800 Microcontroller providing the server on my home network, which has no file system and has a very basic http server on it. Due to limitations of the microC I cannot run Java/Perl/Python or any other server on it other than setting up a server using its own native Dynamic C language (essentially manually opening and controlling sockets in C). I am able to successfully connect to a socket on port 3333 of the server and transfer information between the server and the .swf file when it is the sandbox type "local-trusted" (while I'm debugging in Flash).
Because of this I'm fairly certain the code to setup the socket between the server and flash works fine. My problem occurs when I try to run the .swf file as "local-with-network" (such as running it after publishing on my desktop) or "remote" (accessing the .swf file when it is located on the server) and it then requires a socket policy server to host a socket policy file on the server. On my server I have code setup such that whenever a socket opens on port 843 or port 3333 (my data port) and sends a stream of raw data containing the request <policy-file-request/>, the server writes back in ASCII the below code and closes the socket.
Code:
Select all<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "[URL]">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-access-from domain="*" to-ports="*" />
</cross-domain-policy>
[Code] .....
So for some reason flash times out while waiting for the socket policy file. I have tested sending the <policy-request-file/> over telnet, and have received the above policy file. I have also sniffed using wireshark and saw that my desktop sent the policy request and received the policy file. I am guessing that Flash times out because it is waiting for some kind of terminating character that states the end of the policy file, and to that end I have tried sending. Interestingly, instead of sending the policy file I have tried sending random data from the server to flash, and flash displayed the Warning: Ignoring policy file at (URL) due to incorrect syntax. Because I don't receive this warning when I send my policy file I don't think it is formatted incorrectly.
I have also tried using the below flash code to hold the socket request open indefinitely, but it also errors after 20seconds.
Code: Select allSecurity.loadPolicyFile("xmlsocket://192.168.1.59:843");
The .swf file will eventually reside on the server itself at 192.168.1.59/myProg.html. I have only tested the flash file remotely on the server a couple times, and in addition to the previous warnings/errors, I received the warning: SWF from (URL) may not connect to a socket in its own domain without a policy file.
Actionscript Socket Policy File Server Problems Has anyone been able to successfully implement a service to serve the required socket policy file to FlashPlayer?
[Code]...
I making a game leaderboard on facebook. I'm not using f-connect but working inside the canvas. When I try to load the images from facebook it gives me the following error:A policy file is required, but the checkPolicyFile flag was not set when this media was loaded.Here is my loader code
public var preLoader:Loader;
preLoader=new Loader();
**update**
[code].....
I am making a game leaderboard on facebook. I'm not using f-connect but working inside the canvas. When I try to load the images from facebook it gives me the following error[code]....
View 1 RepliesI'm trying to get my Flash application to connect via socket to my server, so I need to set up a socket policy file server. It seems like there are various roll-your-own implementations floating around out there, but is there any kind of standard or best practice with what to use?
As an aside, it seems strange that Adobe imposes this restriction but doesn't make something readily available to support it.
I'm using as3httpclientlib to post data to my web service, but I'm continually getting the following security violation. Does anyone know how to resolve this? My crossdomain.xml file is below the security violation notice. NOTE: I'm using apache to proxy requests to the web service, therefore the target url/port and the url/port serving the applet are the same -- [URL] Also, the rossdomain.xml file is located in the root of the web app which serves the applet rather the web service; however, since the requests are proxied the url for the file is [URL]
[Code]...
I making a game leaderboard on facebook. I'm not using f-connect but working inside the canvas. When I try to load the images from facebook it gives me the following error:
SecurityError: Error #2122: Security sandbox violation: Loader.content: [URL] A policy file is required, but the checkPolicyFile flag was not set when this media was loaded.
Here is my loader code
public var preLoader:Loader;
preLoader=new Loader();
**update**
Security.loadPolicyFile('http://api.facebook.com/crossdomain.xml');
[code]....
something ( I have made sure the pictures are static and do not require a facebook login or anything , they are just user public profile pictures)