I am using the XML/MX/Syndication libraires and getting a Security Error #2048 error. The error seems unreasonable to me in that there is no forward solution to it on the Internet. I have tried hardcoding security methods in AS 3 and also using a crossdmain.xml file in my root directory to no success. I am about to give up and use pure PHP. There should be a more simple solution to this.
View 11 RepliesI get following error: Error #2044: Unhandled securityError:. text=Error #2048: Security sandbox violation: [URL] cannot load data from 192.168.3.5:4854. at TicTacToe_fla::MainTimeline/TicTacToe_fla::frame1() ". I tryed to solve this problem about 3 hours, but I failed I have the file crossdomain.xml in the same folder like my .swf file on the server with this content:
[Code]...
I have an application that connects to a binary socket server running on port 2234. I use the python policy file server, which I downloaded from [URL], which runs on port 843. If the client app is trying to connect to a socket I can see that the server is receivng the request for a policy file and that it sends it to the client. However, in the client, I get a security sandbox error. How is this possible? And is it possible to check whether the client really received the policy file? BTW, here is my policy file:
<?xml version="1.0"?><!DOCTYPE cross-domain-policy SYSTEM "/xml/dtds/cross-domain-policy.dtd"><cross-domain-policy><allow-access-from domain="*" to-ports="*" /></cross-domain-policy>
I have created a crosdomain policy file, I have added code to my flex app, and I still get security sandbox violation...have I done something wrong? Here are my errors and file snippets:
Error #2044: Unhandled securityError:. text=Error #2048: Security sandbox violation: http://mysite.com/folder1/folder2/media/swf_demo.swf cannot load data from http://mysite.com/folder1/folder2/media/locXML.xml.
swf_demo.swf is my flex application
The following lines have been added to my flex application:
Security.allowDomain("mysite.com");
Security.allowDomain("www.mysite.com");
Security.allowDomain("http://mysite.com/folder1/folder2/media/locXML.xml");[code]..
When i am running my file locally it runs well but when it runs from a server, it throws an error
[Code]...
I googled a lot. I found a solution of cross domain policy funda but i am not clear with it. Anybody has ideas of getting rid of this problem..?
I have a simple IRC socket that is used to communicate with servers for a web-based IRC client. Unfortunately, attempting to connect to a network results in a security error. I read up on sandboxes and their appropriate permissions, and then used Security.sandboxType to get the sandbox of my socket, which came up as remote. After reviewing the documentation, I still don't fully understand how I can enable my socket to connect to a remote IRC server. I tried Security.allowDomain,
View 1 RepliesI am trying to connect to a socket server with the following:
Code:
Security.loadPolicyFile("xmlsocket://192.168.1.111:843");
var xmlsocket:XMLSocket = new XMLSocket();
xmlsocket.connect("192.168.1.111", 4000);
stop();
Here is the policy file:
Code:
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all" />
<allow-access-from domain="*" to-ports="*"" />
</cross-domain-policy>
Debug Output:
Attemping to launch and connect to Player using URL C:Documents and SettingsMattDesktopMUD_Clientclient.swf
[SWF] C:Documents and SettingsMattDesktopMUD_Clientclient.swf - 1977 bytes after decompression
*** Security Sandbox Violation ***Connection to 192.168.1.111:4000 halted - not permitted from file:///C|/Documents%20and%20Settings
[code]....
I am trying to connect to a public resource using actionscript. I already have a PHP site set up to do this, but wanted to move it to Flash. From what I have read, Flash absolutely requires the destination location to have a crossdomain.xml file referencing the remote SWF. This seems absolutely ridiculous.
If I am correct, this means that public resources such as RSS feeds cannot be accessed using Flash? Is there any possible way to access a public file (like RSS) remotely from a SWF without having access to the destination server's crossdomain.xml file? I've tried using Socket and URLRequest, both giving the same "sandbox violation" error.
I seem to be getting this error everytime I try to connect to my XMLSocket server, does anyone have any idea what this is. I do have a crossdomain.xml file at the server root. The crossdomain file consists of:
<cross-domain-policy>
<allow-access-from domain="*" to-ports="4000,4444" />
<allow-access-from domain="*" to-ports="5000" />
[code]....
I have an swf hosted on let's sayI want to allow it to access my localhost. So in the root of my localhost, I've placed the crossdomain.xml file:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
[code]......
I get the below error when i am trying to make a java call from flex.
[RPC Fault faultString="Send failed"
faultCode="Client.Error.MessageSend"
faultDetail="Channel.Security.Error error
[Code].....
what's wrong with this picture? Why is this security error happening? Is there something I need to change with my crossdomain.xml file?
[Code]...
I'm attempting to create an XMLSocket that connects to a PHP-written socket server.I think my code is pretty sound. I used to receive an IOError, but now that is solved and I keep receiving "Error #2048: Security sandbox violation". My .swf, socket server, and crossdomain files are all in the same directory.
My ActionScript:
Code:
package
{
import flash.display.MovieClip;
import flash.events.IOErrorEvent;
[code].....
My SWF resides on domain A, is loaded by a web site on domain B and is trying to ping URL (URLLoader.load) on domain C. But I am getting "#2048: Security sandbox violation" .. why? Of course I have read the manual, I saw the security white paper but I do not understand it. Don't you know any blog or such where it is explained for dummies? With lots of examples and maybe a table showing what is allowed and what is not?
View 2 RepliesI've developed a preloader for an ActionScript 3 application that uses URLLoader to load an encrypted swf. This has been tested on different OSs, Flash Players and browsers and everything works as expected except for a series of PCs being used by a colleague on a corporate network. The PCs at fault use Flash Player 10.0.22.87 with IE6 on WinXP and get security sandbox error #2048 depending on the contents of the file being loaded! Some of the tests and results include:removing 99% of the contents but keeping first 6k (works)replacing contents with 4 bytes 00 (works)inserting 16 bytes: EF BB BF <html></html> at beginning of file (works)inserting 16 0s at the beginning of the file (fails)xor FF all bytes (fails)I've tried other tests such as different file extensions, Security.allowDomain(), crossdomain.xml, Security.loadPolicyFile(¦), dataFormat = URLLoaderData Format.BINARY etc but I think these are all irrelevant due to the fact that the app sometimes works.The code is just the standard new URLLoader(), adding event listeners, then calling load(new URLRequest(¦)). The test app doesn't include the loadBytes() so this isn't the issue either.
The PC at fault could be behind a firewall or using a proxy. At this stage my only theory is that their antivirus, firewall or proxy is examining the contents and sometimes decides to intervene, perhaps with a redirect. This would also explain why (according to the web server logs) the files are being requested even though the security sandbox error is generated. However, this does not explain why Flash generates the error in the first place, depending on the contents.It's not possible for me to visit on site or get them to modify their settings or configuration, but I can ask them to run various Flash Apps for testing.URL...I can come up with a workaround (such as ensuring the file always starts with dummy <html> tags and then strip them before decrypting), but I'd prefer to get to the bottom of this issue if possible to be confident it won't occur again; this is for a Facebook application so it's possible it will be used in a large variety of environment
I have a big problem i get this error even if i load the "load Policy file".
View 1 RepliesHow can I disable crossdomain.xml check when the executing swf has been loaded on localhost?
Error #2044: Unhandled SecurityErrorEvent:. text=Error #2048: Security sandbox violation: http://localhost:2541/xxx.swf cannot load data from http://www.com/xxx.swf.
I want to assign full trust to the HTML5 web application running locally. I want to disable any crossdomain checks.
Some external servers do not provide crossdomain.xml for their hosted SWF files.
I am running locally. I want to have full trust for debugging purposes.
How do I do that?
I will not consider AIR as it cannot be used from HTML5 application.
Adding the url "http://localhost:2541/xxx.swf" to "C:UsersArvoAppDataRoamingMacromediaFlash Player#SecurityFlashPlayerTrustu.cfg" did not help.
[URL]
I'm having trouble with an AS3 AMF RemoteObject request that is hosted on App Engine. I have a crossdomain.xml file in the root of the domain, and also one at the remoting endpoint.Here are the contents of the root crossdomain.xml:
<?xml version="1.0"?>
<cross-domain-policy>
<site-control permitted-cross-domain-policies ="all"/>[code].....
Loading the swf file and testing it on my machine works just fine... I think that may have something to do with me having the debugger version of Flash Player. When I push it up to App Engine to make it public, other clients access it and get a Client.Error.MessageSend Channel.Security.Error error Error #2048 url: http:[url].......I am using Flex 4 beta, and the App Engine Python runtime. I have tried full wildcard in the crossdomain, and even accessing the data endpoint at a relative URL so as to avoid this error.
I know I started a topic with a similar name a couple weeks ago, but this is actually a different question.
I have a crossdomain.xml file in both my server's root and the working directory:
<?xml version="1.0"?><cross-domain-policy> <allow-access-from domain="*" /></cross-domain-policy>
I have a flash file that is connecting to my server using Socket:
sock = new Socket('[ip address]', 80); Everything works perfectly in Flash, but the swf file throws this error:
[Code]...
I have written a simple upload component in Flash, but I am now having issues in uploading due to a Security Sandbox error. I now know this is due to the fact I am uploading from one domain, to another, but 1, this used to work, 2, i have implemented a cross domain xml file by placing it in the root of the domain I'm serving from. There is also the following code at the top of my movie that used to work:
System.security.allowDomain("*"); Here is the plan, upload from admin.subdomain.serveraddress.net to serving.serveraddress.net, but it doesn't work
[Code]...
Preface: I'm using Flash CS4 Professional for the Mac, AS3 and Flash Player 10.
I have an RSL (runtime shared library) SWF that contains bundled classes which I store in an online location. I also have another SWF that access that runtime shared library in order to instantiate it's classes and use their methods/functions.
Here's the code of the RSL:
Code: Select allpackage {
import com.thisCompany.customClassOne;
import com.thisCompany.customClassTwo;
import flash.display.Sprite;
[Code]......
I've also tried putting the code Security.allowDomain('*') (from import flash.system.Security) in the RSL SWF and it doesn't work.
what to do to let my my host SWF properly access the objects and methods/functions of my RSL in another domain?
I have a swf file "website.swf" on my desktop computer, in the www directory of my wamp server. The website loads the swf file fine.I have one textbox that i want to be able to load all the different contents of my site depending on the page, and in the same directory, I have all the different txt files (i.e. news.txt about.txt portfolio.txt etc)Now, when I'm running the swf file in Flash CS5, it makes me allow it and then works fine. However, once I publish and put it on the server, and then go to the website it returns "Error 2048". I've tried doing the crossdomain.xml suggestions to no avail.
View 5 Repliesam having a little trouble with a simple form on one of my flash websites. The form takes three pieces of information (name, email and description) and should submit this data to a php page in the same directory where it emails it to me.
When I run the swf from the Flash CS3 Pro program, the connection and submission goes smoothly and I receive the email.But when I load the swf and the php file onto my site and try it over the internet, it gives me the following error:
Error #2044: Unhandled securityError:. text=Error #2048:
Security sandbox violation:
http://MYSITE/test/theswf.swf
cannot load data from
[code]....
I'm running into an issue with an HTTPS post request where I get the following error (please note some of the URLs have been modified to protect privacy):
Code:
Error #2044: Unhandled securityError:. text=Error #2048: Security sandbox violation: http://[local_ip_addr]/[my_swf].swf cannot load data from https://dev.[domain_name].net/[path_to_xml].
When I review the crossdomain.xml I have the following (again, sections omitted to protect privacy):
Code:
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"></site-control>
[code]....
So that appears to be set up correctly. Requests sent to the HTTP protocol happen just fine, it seems only to be the HTTPS. Do I need to set up Security.allowInsecureDomain() to have this work or is there something on the crossdomain.xml side that I need to set further (such as <allow-access-from domain="*" secure="false" />)?
I am getting a strange problem while I am making my release build swf.The swf is supposed to make some internal server calls and then display the data and also play it.When I make a release build swf and excute it, while making server calls it throws exceptions likeSecurityErrorHandler: [SecurityErrorEvent type="securityError" bubbles=falsecancelable=false eventPhase=2 text="Error #2170: Security sandbox violation:file:///Path to the swf/WebPlayer.swf cannot send HTTP headers to **Method Name to bring data from the server***]And after this nothing can be done as everything depends on the data from the server..I have updated my cross-domain.xml on the server to support the master-only policy file but that also didnt ..My cross-domain.xml is
<cross-domain-policy>
<site-control permitted-cross-domain-policies="master-only"/>
<allow-access-from domain="*"/>
[code]......
i'm trying to integrate with a plain http service which has both http/https flavors available for consumption. sadly they never thought of a flash client consuming these services and it will take another 6 months to roll a crossdomain xml policy file on their service (there security team has to approve the process, pm team has to include it in their roadmap and blah blah). i've already implemented the flash client which works fine from a flash ide security sandbox. is it possible to get around this crossdomain policy requirement.
my flash file will always be hosted as [URL] and i will be communicating with [URL]. i'm saying [URL] because they do some loadbalancing at the backend and allocate random servers on connection (which is fine from their server side design perspective). I tried putting following two lines in the constructor of my movie clip, but couldn't pass through the security sandbox error:
I have two Flash files: pre-loader and application.
Pre-loader: (D:ProjectsFlashAppsddedd.fla) is doing basically this:
var mRequest:URLRequest = new URLRequest("http://localhost/flash/dd.swf");
mLoader.load(mRequest);
}
Application file: (D:ProjectsFlashAppsdddd.fla) is the real application and among other things is doing this:
_loader.load(_request); //where _request = "assets/html/style.css".
When debugging the pre-loader, at this point I am getting an error which says:
SecurityError: Error #2148 File SWF http://localhost/flash/dd.swf cannot access local resource file:///D|/Projects/FlashApps/dd/assets/html/style.css.
The application must be loaded by the pre-loader, it won't start when called directly. But apparently, the security settings are preventing such duo from being possible to debug. Normally when it is on a remote server, it is working ok.
What I have done so far to resolve it:
Added crossdomain.xml to my local i:xampphtdocs folder:
> <?xml version="1.0"?>
> <!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
[Code]....
Set File > Publish Settings -> Local Playback Security -> "Use local files only" in both files. It didn't work, so I set it to "Use network only" Also didn't work.
What else can be done to be able to debug these Flash files locally?
How can i settings crossdomain.xml my flex project.* this is my crossdomain.xml.
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
[code].....
I've tried lots of different methods but my project send error message "Security error accessing url Unable to load WSDL. If currently online, please verify the URI and/or format of the WSDL [URL]"
put the file in different places
C:wampwwwMYPROJECTin-debugcrossdomain.xml
(my swf url : http://localhost/bin-debug/test.html checked http://localhost/bin-debug/crossdomain.xml its ok)
C:wampwwwcrossdomain.xml
I added the load line of the project
protected function application1_initializeHandler(event:FlexEvent):void
{
Security.loadPolicyFile("http://localhost/MYPROJECT/bin-debug/crossdomain.xml");
}
if flex server type select none everythings ok. but server type select PHP need crossdomain.xml how can i fix.
Im looking for a solution for the Error #2048 from Flash. I have a server program developed in Java using the class xSocket and it works fine. It manage the clients from Flash. Well, once i installed the server app in my domain "97.225.158.110" and running the client developed in Flash from my PC within Flash environment, it connects to the server with no problem. But, if i upload the flash to the domain and load it in a web explorer, it doesnt work. Well, i have been seeing many web pages mentioning the policy file and i will show you how i have done it: In the the Java App i have a event handler for incomming data where i idetify the incomming string:
Code:
if(data.equalsIgnoreCase("<policy-file-request/>")) {
Main.Log.append("Enviando archivo Politica Seguridad");
nbc.write("<cross-domain-policy><allow-access-from domain="*" to-ports="8090"/></cross-domain-policy>�");[code].............
Well, the java server app receive the string policy request and it should answer with the quoted file but the Flash never receive it and in a minute the Error 2048 appear.
My flash application seems to run correctly on Windows but not on a mac. It is supposed to retrieve data from a php file with the following code:.
[Code]...
When loaded directly from a browser, the php code works fine both on Windows and Mac. But the flash app throws a Error #2048 on Mac. here's the code for the app:
[Code]....