ActionScript 3.0 :: Prevent Loaded Swf File From Accessing Local Network Files
Nov 2, 2009
I am creating a web page that allows users to upload their own swf files to my web page, which are then used by the main web page as components. This creates a security issue though because I don't want the uploaded swf files to access other files on the server.
when the main webpage starts, it loads whatever third party swf files the user specifies. Is there a way for my main web page to change the security settings of the loaded swf so that the loaded swf is treated like it was loaded from another domain? Or is there another way I can provent these uploaded swfs from accessing local files on the server.
I am having a strange issue in my flex app. I have a Video element that loads an FLV file from the same directory as the SWF app. If I move my SWF and FLV to a local directory on my computer and load the SWF in my browser, the video plays without any issues. However, if I move the same collection of files (SWF, FLV, HTML) to a network share, the video no longer loads.
[Code]...
In my netStatusHandler() callback I get an event status of: NetStream.Play.StreamNotFound.
Again, I only have this issue when loading content from a network share.
I have the following problem when loading a swf file. I have content.swf file located at [URL]. The contetn.swf access a file settings.xml located in the same dir. I load it like this:
_settingsURLRequest = new URLRequest( "settings.xml" ); _settingsLoader = new URLLoader(); _settingsLoader.load( _settingsURLRequest );
Now I have another file loader.swf located at another domain [URL]. The loader.swf file loads content.swf but content.swf search for the settings file at domain2 not domain1. I know that I can use absolute address when loading the settings file but I'm loading a lot of files and I prefer another solution. Is there a way to specify that content.swf should always search for settings.xml in its own domain no matter the fact that its being loaded from onother file in onother domain?
The reason Ordinarily I would just host everything on the server, the swf file and images and serve them out using something like apache. However, we're working with an embedded device with hardware limitations. So we thought we could avoid this by hosting the images locally on a cd.But Flash player moans about the security settings. I know a way to overcome this would be to give the user instructions to change the global security settings- hence allowing both network and local access. But we feel that this would be too much to expect the end user to do.We want our model to work out of the box so to speak. Or as best as possible.
Is it possible to access both network and local files, flash player 9/10?
Here is the situation:
I have an SWF which runs locally on the client's machine.
It communicates, via XML socket, to a C++ server.
It also needs to read some configuration files from the local file system...
c:config.xml <---> test.swf <---> C++ server
So I need the SWF to be fully trusted, as if it was ran from the Flash IDE.But I can't tell my clients to set it to be fully trusted using Adobe's Global Security Settings Panel
What I can do is alter my C++ server code, somehow granting permissions to the SWF.
I've been fooling with this problem since AS2.0 (and shared Objects) and I'm not much closer to solving it, partly because every article I read on it is focused on php and server-side stuff that doesn't apply. How to load a String Array from a txt file in local user space (the folder from which the .swf is run). What I need to know: The easiest way for the user to save/load a file. The file has to contain Objects and Arrays reflecting his current status in the game. The goal is to avoid non-Flash apps and languages, and external Classes if possible (I do everything right in the main fla). I don't mind that the user has to initiate and approve the upload/download.
I try to load a file over the local network with Loader Class but I get the error "URL Not Found". I use a path like this "file://///myPCnetID/pubilcFolder/pictures/mypic.jpg" which refers to a folder on the same PC I compile and run the Air flash file.
When I copy the adress into the browser the jpg-file ist displayed corretly.
I have two SWFs: a Loader SWF, and a Loaded SWF. I need to add the Loaded SWF to the display hierarchy, but I don't want to give it free access to the stage. It may, for instance, attempt to change the scaleMode, and I don't want that to happen. What are some good methods for restricting loaded content's access to the stage? I may, for instance, want to allow it to access the stageWidth and stageHeight, but not the scaleMode or align.
Additional Constraints. I can't change anything about the Loaded SWF. Both SWFs are in the local-with-file-system sandbox. These SWFs are both Flash Player 10, ActionScript 3, made in Flash Professional. Not AIR, not Flex. I'd love to be able to implement a proxy class or a getter to somehow intercept calls to the stage, but I don't believe there is any way to.
I don't believe, for example, that you can subclass the Stage class and use that subclass in place of the normal Stage object referenced by the stage property in all MovieClips. The stage property is read-only, so it can't be cross-scripted by the Loader to point to something different.
I have a SWF file located at the local network in the public shared folder that I do not control over trying to read the external file on the local network.
I am currently hitting instead an security violation
Error #2148: SWF file file://....mySWF.swf cannot access local resource file://...config.xml"
I've added the network path where SWF an XML file resides to "trusted locations" via Flash Player Global Settings.
The added network path is successfully displayed at the list of "trusted locations" within Global Settings Manager, but it does not look like Flash Player is able to really parse the local network path as a "trusted location"
I'm FMS beginner (server side newbie in general)... I installed FMS 3.5 (Development) on my computer which is inside of local network. Now I try to connect to rtmp service from another machine in same network using my computer's IP as I used to while connecting to my apache, but it is worthless. Everything works fine on my computer.
I was wondering if it was possible to send a string to a flash application from a flash application on the same local network? Can i put the code requiered on a mobile (android) in air?
I have a problem with FMS 3.5 installed on Windows 7. The problem is that FMS works only on my local machine, I am not able to use it from computers in local network. I turned off all windows firewalls and my machine is visible for other computers - I am able to connect to FMS Welcome site on apache on default port 8134, but streaming fails, and I cannot do the same on port 80.
For example, in local network, when Adobe Air is reading files from local server (\Serverstorage) and network will be in down for a second, Air becomes eat a lot of memory and it is increasing up to 1GB (while normal memory use is 100 kb or less).Just reading file with File('file path on local server'); from unstable network can cause this error. Have anybody seen that in projects?
private function init() : void { file = new File("\Serverdragracing
I am developing flash p2p chat. It works fine on my friends' computers (they can chat each other), but not on mine. The problem is that I have local network at home, and I think that Flash Player tries to make p2p requests to peers inside my local network.Can I check if user have local network in AS3 and up the level of network to the WWW?
finding the url of the swf filefrom which it has been loaded? The purpose of the url is, I amloading some flv files using relative path. I just want to achievethe same by appending the relative path to the parent swf url fromwhere the parent was loaded. I am a newbie to AS3
Anyone know a way to prevent caching of local xml files? I am testing an app, and keep making changes to my xml - which don't show in Flash until I close and start over - a real pain. I can prevent caching when on the server, by setting the request headers, but this doesn't work locally.
I am trying to access a button inside an external swf file that I loaded. Problem is every time I try to access this button I get an error saying that it's null!
Here is my code:
public class DocumentClass extends Sprite { public var loader:Loader; public var swfFile:URLRequest;
[Code].....
Now this should work, code-wise I think its correct. The problem is that loader cant find the required button. There is indeed a button in the loaded movieClip with an instance name of "button", I double checked that.
[URL] basically i was just a layer too high and this is why i couldn't access anything..
How do I get to the MovieClips within an externally loaded Movie Clip. Lets say I have a movie Called ONE in the swf I just loaded. How can I work with it alpha, position and other properties of the children of this clip? CODE IN MAIN TIMLINE:
[Code]...
Now its loaded I want to change the postino of the clip called ONE in the movie LoadedMC I just created.
i'd like to know if its possible to save information obtained from users to files if the user is accessing the flash file from a cd. I would also like to know how it works if possible. And can the flash file be in .exe instead of .swf?
I was wondering if it would be possible to write a file, not to the local system, but to a connected server or other network path. Would i have to use an external php interface for this or can i entrust this to the AIR framework?
My users upload a certain kind of text file that sometimeshas references to images stored locally on their hard drive. I needto check this file either on the server or within a flash app tosee if it has these references and then grab those images in aflash app to upload to my server.So I can use FileReference easily enough to have users uploadlocal images. But FileReference requires users to select their files with a dialog box. I can't have that. Myusers wouldn't know where to look and there are typically way toomany files, sometimes with the same name but in differentdirectories.
I can also just use URLLoader with a local URL, I guess I canprobably just use Loader too? That works great. The problem here isI can't communicate with both the server and the local filesystemin the same flash application due to Flash's security sandboxrestrictions. So I can get out of those security restrictions byplacing or editing a trust file in designated locations on variousOSes. I then need to install this trust file which is more invasiveand confusing to users then I want to be...Java's method of accessing local files from a web applet bysimply signing the applet with a certificate and having a dialogbox popup where the users grants access is ideal. Is there anything
I've been following the techlabs tutorial on building an as3 slideshow as I'm just getting used to as3.I've been trying to load in .swf files instead of static jpegs, but it won't work.I'm assuming this part of the code is what won't allow the .swf files to be loaded from the xml file...end a hand and explain what this section is doing and if possible what to change to get it to load swf's as well as jpegs...?
I am trying to prevent users from viewing my site and then simply going into their "temporary internet files" and stealing my swfs and XML files. I have been using a great .PHP code to stop this but now I am working on a server server that only uses .aspx files. Does anybody know of a way that I can stop files from being stored in the "temporary internet files" folder. I have encrypted the files but this is not good enough.
I have created a flash movie which loads a XML file. This XML file contains around 8 links.
Now I am trying to load another XML files corresponding to each link. That is, if clicked on Link1, flash movie should load XML File 1, Link2 should load XML File 2 and so on.
I have tried all manner of AS3 scripts to no avail. Most scripts that are listed on the internet either loads them and displays them at the same time (simlutaneously) or I get script errors.
One application JEE / Flex 4 running on a tomcat, inside my Flex layer I have a iFrame passing a url to an ip of my internal network (http:url....) which is another application running within an industrial PLC.When access this app from within my internal network works fine, but when I try to access this iFrame to an external network in my home for example have a timeout error onhttp:[url].........
I believe this error occurs because the flex client is trying to run this url as I was in a internal network.Is there any way to run this url from an external network?
i am having a problem launching a local html file from my swf. i have a button called print that when clicked it is supposed to open the local html file and print out the content. this is the code i used on the button
on (release){ getURL("folder/folder/file.htm","_self"); }
