Flash :: Player 10 Security Model For File Uploads?
Feb 18, 2012
I've been reading about the security restrictions for file uploads in Flash Player 10.According to the FileReference docs for upload(), the upload does not have to be triggered by a user-initiated action (the browse() does, but that's another story). If it did, that would force an awkward user experience for multi-file uploads, since only one upload can occur at once -- so the user would have to click (or press a button) once per file to initiate the upload, but only when the previous file had finished uploading.
[Code]...
View 2 Replies
Similar Posts:
Nov 26, 2009
The only tools/plugins I've seen online that allow for multiple files to be selected for upload through one single dialog box using a SHIFT or CTRL click action (as opposed to clicking on a single file per for file uploads) exist for controls made in Flash/.NET/Java, not just straight Javascript/HTML/PHP.
Why is that the case? I'd imagine that if possible, site developers would look to having less dependencies on different technologies rather than more.
View 3 Replies
Jul 31, 2011
I'm uploading an image file with upload() of a FileReference object however the network monitor in Flash Builder doesn't report anything. Is that normal behavior? A google search didn't return anything.
View 1 Replies
Dec 4, 2009
I am building a photography web site with flash and I found a really cool slide show extension plug in (www.slideshowpro.com) were can easily upload and update my portfolio slide shows.when I publish out to HTML, I test it in a browser and I get this warning when I click on the photography page.I read in adoby help and it said flash developers can allow communication between sites with this AS code Security. allowInsecure Domain ("nathan44. slideshowpro.com");so I added this code to my actions layer on the firs frame in "scene 1" and to the actions layer in the photography section. But nothing changed i still get this warning when ever I publish out to an HTML, when I just preview with control + enter i can view the sideshows fine.
View 4 Replies
Mar 22, 2012
I am using twilo client in one of my apps and it is showing following popup when I click on call buttonBut I want to show the following pop up which is lot simpler and seems less cumbersomeIs there a way to control which pop up comes on the screen? I have read some documentation of adobe but their configuration files live in users computer which ofcourse can not be changed by a website.
View 1 Replies
May 27, 2010
I am building a Audio Recording tool using Flash and Wowza. I dont want to start the recording until the use clicks the Allow Button is the Security Pop-up question represented here [URL] In Audio I dont get this until I attach the stream to it. In Video can get thsi question when I attach the camera to Video.
I want to avoid making a connection until the user clicks Accept and this doesn't happen until I make the connection request in Audio. I am able to display the [URL] pop-up using SecurityManager Is there a way I can call the pop-up from my code. [URL]
View 1 Replies
Apr 27, 2010
I code primarily in PHP and Perl. I have a client who is insisting on seeking video submissions (any encoding) from the public via one of their pages rather than letting YouTube do its job.Server in question is a virtual machine and I can adjust ini settings for max post, max upload size etc as needed.My initial thought is to use a Flash based uploader with PHP on the back end but I wondered if someone might have useful advice and experience on the subject?
View 6 Replies
Jan 6, 2012
I'm looking for a tool to facilitate mulitple webpage file uploads from a single file browse dialogue. I know this has been asked previously, but I can't find anything current.I'd like to check file size prior to upload, and I gather Flash is still the only way to do that cross-browser? Ideally, I'd like an upload progress metre.I'll be using Linux and Apache servers, but don't have access to install add-ons such as PHP APC. Again, I assume something flash-based is the only option there?
I've looked at SWFUpload, but that appears to be another of these projects where the developers have become quite zealous and turned a simple concept into a full suite of tools for the masses.It seems quite cumbersome and I don't think I want to use it for my purpose.I'd prefer not to have to write something from scratch for this.suggest a non-Flash alternative if there is one? I do need full cross-browser compatibility without too many layers of degradation, so anything HTML 5 probably isn't what I want.
View 1 Replies
May 12, 2011
Alright so I'm making a website for my friends band, and they want to have a music player to play their MP3's. One of the things I'm concerned about though, is the security of the MP3 files. Their albums are on iTunes to buy, so I'm looking for what the best option to have the MP3s be played but not be able to be downloaded and saved.The best thing I can think of is embedding the MP3's inside a Flash music player, but that would be more work than it's worth it seems.
View 2 Replies
Oct 10, 2011
I want to stop flash player security panel to appear every time in my video recorder. I apply allow and remember but still popup appears. How I can stop this popup if once user chooses allow and remember?
View 0 Replies
Apr 30, 2009
This Adobe Flash Player Security box is really getting in my way. I have a button that acts as a lind to a web page It has this bit of code programmed to it:
button.addEventListener(MouseEvent.CLICK,buttonCli ck);
function buttonClick(event:MouseEvent):void {
var req:URLRequest = new URLRequest('http://...");
navigateToURL(req);
}
Can anyone tell me if calling navigateToURL() causes this security box to appear every time if you havent trusted this .swf in your flash settings? i have looked at a way to handle the "link" with javaScript but before I get too deep into something I'm not too familiar with I wanted to see if there was a way to here within flash while avoiding the flash security box.
View 1 Replies
Mar 22, 2010
I use a laptop which is never connected to the web for customer demos away from base. It does not have the Flash authoring environment installed either. Furthermore, a customer's own system used to run development versions of web sites using HTML with Flash content is not guaranteed to have web access either. Because some of the associated FLV files are quite large, uploading to a web host for such testing is not really viable even where clients have web access at meetings.
I have an AS3-based project which triggers Flash 10 local security protection on systems other those that used for authoring, for which the workaround is to set the source folder as trusted using the Flash Player Settings Manager. but [URL] doesn't seem to offer a useful way to avoid this problem without going on line to the Flash Player Settings Manager via an Adobe web site.
[Code]....
View 12 Replies
Aug 25, 2010
how to remove flash player security pop up for camera and microphone through coding.
View 4 Replies
Aug 26, 2010
does anybody know if disabling the security question in the flash player is ok? I need to know the exact facts by reference whether it is ok or not. I found some answers to this but they were assumptions but nor rigid. for instance a reference to Adobe's documentation that says any workaround is illegal.
View 1 Replies
Oct 25, 2011
Problem: Users of our web app are complaining how hard it is to get past Flash Player's Security Panel when they want to make video calls. (Personally, I don't see why it's hard.) We tried several things to guide them through the process, including callouts pointing to the Security Panel area with specific instructions and even an auto-play video. But still some don't get it. I think the biggest confusion is the "Close" button. Users think that it will close the app or the entire window.
Solution #1: It's possible that part of the problem is the small size and styling of the Security Panel.Is it possible to apply a style or skin to the Security Panel, so that it's larger and looks more consistent to our web app?
Solution #2: Perhaps there's also a non-technical solution. Has anyone seen a good implementation of a web app that make it easy for non-technical users to make video calls?
View 3 Replies
May 20, 2010
I am developing a player and I want to make it for only one domain usage for one download. If user needs again then again hew needs to download another version from my site. How can I make it.
View 1 Replies
Aug 26, 2010
does anybody know if disabling the security question in the flash player is ok? I need to know the exact facts by reference whether it is ok or not. I found some answers to this but they were assumptions but nor rigid. for instance a reference to Adobe's documentation that says any workaround is illegal.
View 1 Replies
Mar 18, 2011
I have some Flash application that loads data (external images, SWFs, XMLs) from the same domain. And it was fine until client decided to add load balancers for server. Now we have a number of complaints from users about security errors. It looks like application can't load external resources treating them as resources from different domain without crossdomain.xml.
One of users that have this problem provided us with following info:
Browser: IE 8.0
OS: Windows 7
Flash Player version: 10.1.102.64
I have spoken with server administrator and he told me that we have load balancers that work like Round-robin DNS. In its simplest implementation Round-robin DNS works by responding to DNS requests not only with a single IP address, but a list of IP addresses of several servers that host identical services. The order in which IP addresses from the list are returned is the basis for the term round robin. With each DNS response, the IP address sequence in the list is permuted. Usually, basic IP clients attempt connections with the first address returned from a DNS query so that on different connection attempts clients would receive service from different providers, thus distributing the overall load among servers.
Finally we have: SWF loaded from IP1, data requested from IP2, crossdomain.xml loaded from IP1. All of them can be accessed through the same domain, but have different IPs.Because of IPs difference, Flash Player ignores crossdomain.xml and triggers security error.I'm not sure it happens exactly like that, since for older versions of Flash Player I have found the following words:
The basis of domain comparison is the domain name, not IP address.
So, I have two questions after all of that: How exactly domain comparison for HTTP-connections works in latest versions of Flash Player? Can two resources obtained by address with same domain name but from different IPs treatened as obtained from different domains? Maybe someone have info about DNS rebinding in different browsers?
View 1 Replies
Oct 30, 2009
You all know the new generation of fancy, mostly Flash-based file uploaders like SWFUpload that can show a progress bar while uploading - a great improvement especially for shaky and low-bandwidth connections.
However, these uploaders all bring their own logic of how to handle uploads on the client side. I am looking for an unobtrusive way to "fancify" existing, classical file uploads, i.e. introducing a progress bar to normal file upload forms.
Due to the architecture of uploading files, this is most likely not possible without some tweaking on the client side.
I am looking for a solution that keeps the tweaking to an absolute minimum, e.g. a component that adds itself to the onsubmit event of a normal form, performs the file upload, displays a nice progress bar, puts the resulting temporary (server side) file path into the form, and submits it. On the server side, I just have to modify my script to use the file path provided by the flash uploader, instead of $_FILES and consorts, and think about security for a moment.
This is not exactly what all the Flash-based uploaders do: They can use data from a form, but they do not provide possibilities to submit the form as is, what is what I'm looking for. I am looking for a (probably) Flash based upload function taken a step further.
View 6 Replies
Feb 18, 2010
I've been using this method of file uploading for a bit, but it seems that Google Gears has poor support for the newer browsers that implement the HTML5 specs. I've heard the word deprecated floating around a few channels, so I'm looking for a replacement that can accomplish the following tasks, and support the new browsers. I can always fall back to gears / standard file POST's but these following items make my process much simpler:
Users MUST to be able to select multiple files for uploading in the dialog.I MUST be able to receive status updates on the transmission of a file. (progress bars)I would like to be able to use PUT requests instead of POST I would like to be able to easily attach these events to existing HTML elements using JavaScript. I.E. the File Selection should be triggered on a <button> click. I would like to be able to control response/request parameters easily using JavaScript.
An example of uploading code using gears:
// select some files:
var desktop = google.gears.factory.create('beta.desktop');
desktop.openFiles(selectFilesCallback);
[code]....
Edit: apparently flash isn't capable of using PUT requests, so I have changed it to a "like" instead of a "must".
View 2 Replies
Jun 5, 2008
How would one secure information transfered between the flash player and the website?
View 1 Replies
Mar 28, 2009
like a lot of people on this forum i am having trouble with an MP3 Player. I have my music player, playing, stopping and going to next and previous. But i am now trying to display the time of how long its been playing for. I have a model class (containing the soundchannel, sound and timer) which has a songsModel class (an extension of model, which contains and update method)
I also have a controller class, which is in control of the people pushing the buttons from the songController class. The controller class plays the soundchannel and starts a timer. i have a songsController class which uses the constructor of the model class as a superclass. This class is controlling users pushing buttons. My other class is a view class, which waits for the model to update itself so that it can display the latest songs.
My problem is i cannot figure out how to pass through the timer to the view class for its latest update (every half second). I have managed to display it ever time the model updates as discussed above.
[Code].....
View 1 Replies
Apr 10, 2011
As it is said here: [URL] "If you do a Google search today for "MVVM and Flex", the first post is by somebody who claims that MVVM is not a good fit for Flex. I couldn't disagree more. Out of the box, the Flex framework makes it much easier to implement a Presentation Model than similar MVVM implementations in Silverlight. That is not to say that there aren't good third-party libraries that make it easier in Silverlight, but without any help, it is easier to do in Flex." So MVVM as LOGICAL CONCEPT can be implemented in both but the way it is implemented in Silverlight requires more Plumbing than Flex.
What prevents Silverlight MVVM to be implemented like Flex ? Doesn't Silverlight have same capability in event system to do the same? If yes why does Silverlight do things more complicated what's the advantages then ? Is it about using Class Interfaces which are more strongly typed? What are the disadvantages also ? For example as for implementing MULTIPLE VIEWS for 1 View-Model does Flex implementation make it also more obvious?
View 2 Replies
Sep 24, 2010
I'm using the Youtube AS3 Player API to load video's in a Flash Project. I get this really annoying Error when loading the Player swf:
SecurityError: Error #2047: Security sandbox violation: parent: http://www.degoudenglimlach.be/main.swf cannot access http://www.youtube.com/[[IMPORT]]/s.ytimg.com/yt/swf/watch_as3-vflbgr4dW.swf.
I tried adding the following to my code before loading the swf but it doesn't make any difference:
Security.allowDomain("*");
Security.allowDomain("www.youtube.com");
Security.allowDomain("youtube.com");
Security.allowDomain("s.ytimg.com");
[Code]....
View 2 Replies
Jul 13, 2010
i'm trying to integrate with a plain http service which has both http/https flavors available for consumption. sadly they never thought of a flash client consuming these services and it will take another 6 months to roll a crossdomain xml policy file on their service (there security team has to approve the process, pm team has to include it in their roadmap and blah blah). i've already implemented the flash client which works fine from a flash ide security sandbox. is it possible to get around this crossdomain policy requirement.
my flash file will always be hosted as [URL] and i will be communicating with [URL]. i'm saying [URL] because they do some loadbalancing at the backend and allocate random servers on connection (which is fine from their server side design perspective). I tried putting following two lines in the constructor of my movie clip, but couldn't pass through the security sandbox error:
View 2 Replies
Feb 26, 2012
I have two Flash files: pre-loader and application.
Pre-loader: (D:ProjectsFlashAppsddedd.fla) is doing basically this:
var mRequest:URLRequest = new URLRequest("http://localhost/flash/dd.swf");
mLoader.load(mRequest);
}
Application file: (D:ProjectsFlashAppsdddd.fla) is the real application and among other things is doing this:
_loader.load(_request); //where _request = "assets/html/style.css".
When debugging the pre-loader, at this point I am getting an error which says:
SecurityError: Error #2148 File SWF http://localhost/flash/dd.swf cannot access local resource file:///D|/Projects/FlashApps/dd/assets/html/style.css.
The application must be loaded by the pre-loader, it won't start when called directly. But apparently, the security settings are preventing such duo from being possible to debug. Normally when it is on a remote server, it is working ok.
What I have done so far to resolve it:
Added crossdomain.xml to my local i:xampphtdocs folder:
> <?xml version="1.0"?>
> <!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
[Code]....
Set File > Publish Settings -> Local Playback Security -> "Use local files only" in both files. It didn't work, so I set it to "Use network only" Also didn't work.
What else can be done to be able to debug these Flash files locally?
View 1 Replies
Jul 6, 2010
I'm trying to use the Youtube Chromeless Player (the new AS3 version) in a Flex 4-based project. I'm using the examples provided by Google, but I'm not having any luck. The player loads, but it can't be interacted with. I'm receiving repeated security errors just from mousing over the player:
[Code]....
I've been at this for a few hours now, and haven't had any success. I also can't seem to find any working examples online. Is this new player just not compatible with Flex 4?
View 2 Replies
Nov 27, 2011
I have a mobile YouTube API-centric project nearly done. The last view is a component that is a player, naturally, and Flash is not diggin' the security issues at all. Violations ..... And I am passing my developer key in every call too! So what is the deal with simply loading a video into chromeless player on Android that needs my security attention?
View 1 Replies
Feb 3, 2010
Using SWFUpload v2.2, Firefox 3, IE 8, Flash 10In my ASP.NET application all uploads are being processed by upload.aspx (I have the correct upload_url set in the settings object). Can anyone tell me why (in Firefox) the uploads never hit the upload.aspx page? [code]...
View 2 Replies
Mar 17, 2011
I have a aspx called user-photo-upload.aspx and another aspx called get-photo.aspx. I set the Session["PhotoId"] in the page_load method of user-photo-upload.aspx.
If I visit the user-photo-upload.aspx through the browser normally, the session can be retrieved in get-photo.aspx. But if the flash uploads photo to the user-photo-upload.aspx page, I can't get the Session["PhotoId"] in get-photo.aspx.
I discover that the Session ID is different when visiting the page using browser normally or by flash. I don't know why flash uses another session.
View 1 Replies
