ActionScript 3.0 :: Sandboxing SWFs Loaded From The Same Domain
Jan 31, 2010
I'm building a Flash arcade system that people can deploy to their own websites, which loads its Flash content into a security sandbox. Basically, I'm interested in finding a way to prevent a loaded SWF from accessing the stage.
As you know, once an object in a loaded SWF has access to the stage, it can use event listeners to secure itself to the display list, circumvent Loader.unloadAndStop(), and potentially conduct malicious activities such as key logging. I'm looking to prevent that.
Flash automatically puts SWFs in a sandbox when they're loaded in a domain or subdomain that is different from the parent SWF's. However, the market I'm targeting with this arcade system will probably not have a clear grasp of these concepts, and it's very likely that they will load a SWF into the arcade from the same domain, and that SWF can be malicious. Therefore I'm trying to sandbox content loaded from the same domain as the loader SWF.
View 5 Replies
Similar Posts:
Jan 25, 2010
I want to secure and to load two SWFs files from the same domain, does anyone have any examples and methods applying with allowDomain() that can be used to allow the SWFs to communicate and share data and functions.
ex: www.example.com
main.swf
about.swf (child)
contact.swf (child)
...
Most articles that I found it's based on cross-domain which is not what I want.
View 1 Replies
May 19, 2010
I have an issue that is nearly identical to the poster of this thread, but this post is from 2007 and I think things might have changed since then.
To sum it up: I have a website with HTML files on Server A, and SWFs on Server B.
Users navigate to playgame.html (Server A) with MainMovie.swf (Server B) embedded in it.
MainMovie.swf is supposed to load a number of SWFs (from Server B) throughout. As far as I know they all need to be called with an absolute path, because a relative path will construct the path through the URL of the browser page which is still on Server A. Am I on the right path so far?
My MainMovie.swf literally calls hundreds of SWFs in hundreds of places and setting them all to absolute paths would take forever.
What other options do I have so that it all works on a remote server with relative URLs? MainMovie.swf is in a remote sandbox and can supposedly access files within its own domain, but it's the relative URLs that are killing me.
One solution I could think of is to load an html frame from Server B within playgame.html on Server A, and embed the SWF in there....
View 1 Replies
Aug 21, 2005
How can I send var a from swf 1.swf to 2.swf?
View 2 Replies
Jun 2, 2011
Yet another irritating technical issue, it's the first time I've tried loading assets from another server and it's not working.
Apparently having the loader context check policy file does nothing with SWFs, I've tried with and without, no difference.
I've tried Security.allowDomain("*"); and loading a crossdomain.xml file where the assets are located, and no joy. Every time I try it, I just get an error trying to load a class (that works fine from local SWFs).
I'm compiling from CS5 with access network selected. Also tried with Flex, same thing.
View 3 Replies
Sep 11, 2009
I have a main fla file which loads an external swf into an empty movieclip on the main timeline which works fine but I want a button in the external swf to load another external swf into another empty movie clip on the main timeline.eg. start.swf loads UKEIAMap.swf into (empty movie clip within start.swf) MapLoader_mc then a button havant_b within UKEIAMap.swf needs to load HavantProjectSheet.swf into (empty movie clip within start.swf) ProjectSheetLoader_mc without unloading UKEIAMap.swf
View 3 Replies
Aug 2, 2006
Flash - 8 : Above is an example of what I would like to do/have done. I've gotten as far as loading the "loaded.swf" into the "start.swf" but my problem is I'd love to use that little loading action I made earlier without copying and pasting into the new movie the same actions for a different link. So, how do I load "loaded2.swf" into "loaded.swf" via the link in "loaded.swf"?
View 1 Replies
Jan 7, 2010
[URL] With regards to a parent SWF loading a child SWF via the Loader class, is it possible to prevent the loaded child SWF from:
Making any network calls, or Making calls to specific domains Basically, I'm looking for a programmatic version of allowNetworking:
[URL]
Additionally,Are there any Flash Player version and Actionscript version discrepancies?Are there any discrepancies if using Flex's SWFLoader is used instead?
View 1 Replies
Oct 3, 2011
I am loading an SWF from a different domain.I loaded the swf file like this:
ActionScript Code:
Security.allowDomain("differentdomain.com");
var context:LoaderContext = new LoaderContext(true, ApplicationDomain.currentDomain,
[code]........
View 0 Replies
Aug 6, 2009
I'm loading image from another domain and all is before i try to use it for pattern:
Code:
var pattern = new flash.display.BitmapData(loaded_mc._width, loaded_mc._height,true,0);
pattern.draw(loaded_mc);[code]....
i don't know why but if i'm load XML from the same domain as image before i load image all works fine. i don't know why.
View 6 Replies
Oct 14, 2009
I've tried a bunch of options but can't seem to smooth a dynamically loaded bitmap from another domain. I've come to believe this is impossible without a cross domain file. Is it possible or not possible?
I keep getting:
SecurityError: Error #2123: Security sandbox violation: LoaderInfo.content: http://....swf cannot access http://...png. No policy files granted access.
at flash.display::LoaderInfo/get content()
at Main/showLogo()
So outside of putting a crossdomain.xml file out there, any options?
View 2 Replies
Jul 8, 2008
This may sound like a strange request, but I need to be able to determine:
1. What browser domain the current swf is executing in (that is, the page that hosts the swf is displayed in a browser, what is the domain of the page)?
2. What server domain the SWF was loaded from (ie, what the URL domain was for the SWF)?
I believe both of these I can get via javascript and ugly workarounds and pass them in, but what I need is actually to get these values (at least #2) from inside the SWF without relying on the javascript in the hosting page.
Specifically, what I'm trying to determine is if the SWF is executing in a page from the same domain as it itself was hosted/loaded from. I want to fork on this test and create different behavior for a SWF if it's "hot-linked" (that is, loaded onto a page on a different domain from where I host it).
I've looked into flash.system.SecurityDomain and ApplicationDomain... both these have properties called 'currentDomain' which would seem to be the value i'm looking for (for #2), however this object is a static variable that I can't seem to get any information out of or transform into any kind of useful string that I can look at it's value and test with it.The only info I've found on either of those two classes all relates to passing them to LoaderContext and such, when you are loading external resources.I do not want to load anything, I just want to determine how and where the SWF is executing.
View 14 Replies
Jun 10, 2010
I have a "photo" gallery that loads numerous SWFs through xml, one by one on click. All works fine. All my SWF work fine stand alone. But when I load them into the player, many swf dont work properly.in example, I have textinput textfields in many of the swfs, which work fine on their own but not when loaded into the player. Then I have a word search game that works fine when alone, not when in player. I can see there is something as my mouse cursor changes into the "button finger", but nothing visual.
All drag and drop assigments work fine etc. I have no idea whats up. I have receantly switched to as3 and in as2 there was _lockroot declaration that solved similar problems, but now in as3 (where it supposedly should be automatic) it doesnt work. As it seems that it cannot recognise it own stage value, or selection_focus when loadedinside another swf through xml.Using cs4, as3.
View 4 Replies
Aug 2, 2011
I am developing a flex application with flex 4.1 sdk and java backend (runs on Glassfish 3.1 via http). For security reasons I decided to move my authentication process to https until a session id is obtained. Therefore I changed the filter settings to use ssl for login and logout pages(just two pages due to performance reasons. The data-size sent to client is large and I do not want to slow down the system). Glassfish forwarded these pages to 8181 port (which is HTTPS port). Everything is ok for the java part. However flex defines the 8181 port as a different domain and then problems arise. Due to flash's same-origin policy it cannot load the secured content. Normally a crossdomain.xml is the solution but I am accessing content of the same domain through a different port. What will be the solution ?
View 1 Replies
Apr 28, 2011
My application currently contains a number of Widgets that are managed by a Widget Manager. When the user clicks on a widget (e.g. a Helper widget), the Widget Manager loads the widget into a separate sibling application domain with the following line of code:
wgtInfo.load(null, null, null, moduleFactory); //wgtInfo = IModuleInfo
However, I am unable to use the widget's variables and functions later on. I attempt to find the Helper widget from the Widget Manager's list of widgets, and I do successfully. But when I try to caste the Helper Widget from type IBaseWidget (the interface all widgets share) to type HelperWidget, I receive the following error:
TypeError: Error #1034: Type Coercion failed.....
This is because the application domain of the class trying to use the Helper widget is different from the application domain of the Helper Widget. I tried to fix this by loading all widgets into the same application domain as the loader:
wgtInfo.load(ApplicationDomain.currentDomain, null, null, moduleFactory);
I now get the following error whenever I attempt to load the Helper widget:
TypeError: Error #1009: Cannot access a property or method of a null object reference.
How can I load my Helper widget into a common application domain that is accessible by the other widgets?
View 3 Replies
Jun 1, 2010
post the code for a working cross-domain securityfile that allows access only from the same domain as all the flashfiles and xml files are in?used to be easy in as2 but i think i dont know what i need to know about it in as3..
View 3 Replies
Apr 23, 2009
We are running FMS3 on Windows 2003 Server. Videos stream and play fine when inside our domain, but outside the domain the videos take anywhere from 20 or more seconds before playing.
After analizing the connections it was determined that the player is randomly trying to access ports until it gets to the one that works, but this is ONLY happening from people trying to view videos from outside our domain.
View 14 Replies
Jun 3, 2011
I have moved a web application from old domain to new domain. I cannot get Flash to engage. I have changed the domain in flash_images.php file to the new domain. I have a flash_box.swf file and I have a js file these are the only flash components that I see--old domain is e.g. www.example.com new domain is [URL]..I am not a flash developer, how do I get flash to work on the new domain?
View 3 Replies
Dec 9, 2011
I created some game and would like to let the users play it only on my domain, so to forbid to play it offline or put on some other site. Is there a way to do it? Somehow check domain or so?
View 1 Replies
Aug 7, 2010
Usually when I want to create multiples instances of a same movieclip (that's already in the main .fla library) I use new mcClassName()but what if the clip is external, for example Ball.fla, Ball.as and Ball.swf? I've loaded Ball.swf into the main .fla and I don't know what to do now
View 4 Replies
May 5, 2009
I've made a simple portfolio web site which loads a swf file containing the navigation at the top and then the navigation loads individual swf files containing full page images.The problem is the full page images are distorting very slightly when they are loaded in. I've attached two images, the first image (picture2.png) is how looks when I just open the image's swf file, and the second image (picture3.png) is how it looks after its loaded in by the navigation.
View 2 Replies
Sep 29, 2008
how to unload the swfs in as3 once you click a button to load a new one.
My file works great, with the exception of the videos playing over each other. slight bummer.
I have five buttons that each pull an external swf that is controlled by an xml file. If there were not sound it would not be an issue, but the sound overlaps if you click to the next link before the first video finishes playing.
I uploaded all the files here, including two test flv files. the files were too big to upload to the kirupa forum.
[URL]
View 3 Replies
Nov 22, 2009
I m loading 2 .swf in one flash file and want to control one with another. The first contain small animation and other has play and stop button. Now I want to control that animation with these 2 button.
Files details:
test1.swf: It has the animation
test2.swf: It has the 2 buttons
test3.swf: It is the main file, in which I m loading the 2 files i.e. test1.swf and test2.swf
View 1 Replies
Jan 9, 2011
This may seem a stupid question but I just started learning AS3, Is it possible to keep my menu on top of externally loaded swfs? My menu is sitting on the main timeline as movieclip and the externally loaded swf overlap my main timeline completely completely covering my menu.[code]....
View 5 Replies
May 5, 2011
I recently changed the setup of my project from only having one SWF, to loading in my main SWF through a preloader. I'm facing a problem of scope. My old code for targeting things no longer works. This is it.
ActionScript Code:
if (this.parent.contains(Credits)) {
Credits.gotoAndPlay(120); CreditsText1.gotoAndPlay(120);
}
What would I change this code to in order to target the exact same spot in my loaded SWF? I should add that all my code is in an external .as file, which is set as the DocumentClass for the loaded SWF. I've tried both "this.parent.parent.contains" and "this.contains" Neither worked.
View 5 Replies
Jan 8, 2011
Is it possible to keep my menu on top of externally loaded swfs? I believe it should be but I just cannot figure out how to do it. I have searched around and I believe I should use something like addChildAt but when I try to use it in the main menu actionscript my external swfs do not load anymore.. My menu is sitting on the main timeline as movieclip and the externally loaded swf overlap my main timeline completely completely covering my menu...
View 3 Replies
Apr 21, 2004
What I'm trying to do is create buttons in one swf that load another swf and also give instructions to begin playing from a certain frame in that swf. The target swf has a preloader on frame 1 and then a movie clip that contains a video in frame 2. Depending on which button the user presses the video will be cued up ready to play at different frames. think it may need an if statement ie if x=34 then goto frame 34, but I can't seem to pass the variables to the loaded swf.In the zip file is an example of what I'm trying to do.
View 10 Replies
Oct 12, 2009
If I load an SWF file, is it possible for the pre-loader to access and change a string variable inside the loaded swf? Is there any special way to do this or would it be a simple case of loadedMC.variable = "new value"
View 3 Replies
Oct 13, 2009
I am trying to make transitions between loaded swfs. Below is my code. I know I need to add to one of the functions to make it play the "out" transition before the new swf is loaded. Each swf has a timeline with a stop frame and a frame labeled "out". The below script allows me to press buttons and load the coresponding swf to the stage.
Code:
package
{
import flash.display.MovieClip;
import flash.display.SimpleButton;
[code]....
View 21 Replies
Mar 16, 2011
If I load an SWF file, is it possible for the pre-loader to access and change a string variable inside the loaded swf? Is there any special way to do this or would it be a simple case of loadedMC.variable = "new value"
View 2 Replies
