Professional :: Cross-Site Scripting To Embedding Page
Mar 23, 2010
Here is my situation:
I have a Flash file hosted at:
http://static.mydomain.com/flash.swf
I have a web page that embeds that Flash file at:
http://www.mydomain.com/embed.html
The <embed> code for that SWF has the "allowScriptAccess" parameter set to "sameDomain". Currently, I cannot put links in "flash.swf" that change the location of the embedding page, because they are on different domains, and making a getURL() or ExternalInterface call won't be permissible.
Changing "allowScriptAccess" to "always" is not an option. Putting both files on the same domain is also not an option.
Policy files don't seem to be the solution (perhaps I'm coding them wrong?) and changing the "document.domain" of the embedding page doesn't seem to work either.
View 1 Replies
Similar Posts:
Jul 16, 2010
I have a flash animated logo with sound on all of the pages of my website. My goal is to make a mute button which when clicked will work on cookie base or php session (?) and will mute the sound of the logo on all pages for the given period of cookie.
View 1 Replies
Jun 2, 2011
I have a website with a flex application. The flex application has no user input - except for clicks for navigation. The website also uses no scripting language - i.e. no php, asp, jsp or cfm.
The website just consists of one page which contains the flash file for the flex application. The source code of this page is here: [URL]
I have been advised (by a software program used by my client) that this website is vulnerable to a reflective type XSS attack and have been advised to 'sanitize' all user input.
respect to XSS and would respectfully like to ask that AFAIK there is no user input. What should I sanitize and how?
View 1 Replies
Aug 13, 2010
I have a movie with a document class (Main.as) wich load 2 SWF:
private var mainContainer:Sprite = new Sprite();
addChild(mainContainer);
var loaderx:Loader = new Loader();[code]....
Now I need to access some var/objects in PhotoLoader from PhotoViewer but anytime I compile PhotoViewer the compiler complains:
trace(root.loaderx.dbFields);
1119: Access of possibly undefined property loaderx through a reference with
static type flash.display:DisplayObject.
Notice I need communication between the 2 loaded SWFs, not from the movie that loaded them
View 1 Replies
Jul 5, 2010
I wrote a post a week ago but it seems no one is able to help or I didn't explain my problem well enough, so here I go again.I want to load an external SWF, get an object reference from it and add it to the PV3D scene of my main class. The problem is even though the types have the same names, they are not recognized as the same type.
---------------------------------pv3Dviewer--------------------------- -----------
package {
import org.papervision3d.objects.primitives.Sphere;
public class pv3Dviewer extends Sprite {
[code]....
When pv3Dviewer is run, it traces "no". If I try to assign shereRemote without type casting i get this error:TypeError: Error #1034: Type Coercion failed: cannot convert org.papervision3d.objects.primitives::Sphere@59930b1 to org.papervision3d.objects.primitives.Sphere.
View 7 Replies
May 13, 2009
This is my first entry in this forum but I already found a lot of answers by browsing it.However, altough many references seem to solve the problem I'm hurting on, it doesn't seem to work for me...Now, here's the case:I made a flash web site that will be hosted on an external web server (let's call it serverMy flash needs to get some info from my internal server don't have access to the root, only to the folder «myfolder» so my website reads like this
View 1 Replies
Jun 28, 2010
I have the following problem. I am trying to load custom PaperVision3D objects from an externally loaded SWF in a simple FLARToolKit example project. The external SWF is compiled with the same libraries included in its path as the loading project. I will include only the pertinent functions in order to save some space. Both the external SWF and the loading project include security definitions to allow for access:
[Code].....
View 1 Replies
Mar 20, 2011
I'm trying to embed a swf file on a site. Here a link to the file on a page that works. Example Problem is, I need to place it on a different site (we have two servers) and it's not working once I link to the file on the other server. Below is the code. I've highlighted the part that I changed.
[Code]...
View 3 Replies
Jun 15, 2011
I currently embed a swf video on an html page with this script:
<script type="text/javascript" src="swfobject.js"></script>
<script type="text/javascript">
window.onload = function() {
if (swfobject.hasFlashPlayerVersion("9")) {
var att = { data:"player_3982x260_fv4.swf", width:"640", height:"323" };
var par = { menu:"false", allowfullscreen:"true" };
[Code]...
I've attempted a few different ways to embed two SWFs in the html but havent had any luck. Here's the test page I'm working on: [URL]... How would the window.onload = function() be changed to refference two different swfs?
View 1 Replies
Mar 3, 2011
I have an intro in flash to go to an html/css site. What I have right now is when the image is clicked on it jumps to a scene and plays the animation and that's it. What I don't know is the scripting afterward. I need to know what the script is to allow it automatically forward the visitor to the html site after the animation plays. The intro page is on its own page.Right now my code is on frame 1 and this is it:
Code:
stop();
import flash.events.MouseEvent;
[code]......
View 3 Replies
Aug 19, 2010
I recently added a loader page ("loader.swf") to my flash website. Basically, I created a new file and added a loader which shows the percent loaded, and then it loads in the "index.swf" file. My question is: when I upload my site to the web server, do I use the loader page as the "index" page? My dilemma about that is that I don't want the URL to read "[URL]"...
View 11 Replies
Jul 29, 2010
A project I am am working on has an extremely strange font problem. We have completely unpredictable glyphs missing on Mac compilations inspite of correct font embedding and correct font installations on the machines. Here is some of the context:
1. The Font is a custom truetype font which belongs to the client.
2. We are working on CS5 on the Mac, and CS4 on PC.
3. We are using classic dynamic texts, assigning striungs to the text attribut (not to htmlText). However the probel also occurrs with other classic text modes (single-line, multi line, kerening on or off, etc)
4. It is not predictable whether the glyphs of the font will show or not on the Mac CS5 compilations or not.
5. The issue does not seem to occurr with standard fonts like Courier or Helvetica.
6. Compiling on CS4 on PC works correctly.
View 1 Replies
Sep 27, 2011
I'm using the Flash CS4 IDE, and the first page of my site takes a lot longer to load than I want it to. So I wanted to go through the varied images / symbols / movie clips / sounds and so on to see where all the memory is being chewed up. When I go into my library, however, I can see the Name, LInkage, usecound and Type of my elements, but no mention of file size and I can't seem to find any right click menu that lets me add file size to the list of details being displayed. Is there a way to make it show file size? Or some workaround? And are there any best practices to reduce file size aside from using symbols for anything that's used more than once and reducing image and sound quality?
View 4 Replies
Oct 26, 2009
I have a very simple button with a GetUrl action. The flash is being embedded via a script, using document.write method. All works as expected when the script is hosted within the webiste. I need to host the script externally though, on a remote website (its a banner script). The problem is that when I embed the movie using the REMOTE javascript file, i.e. [URL], the simple GetUrl does not work at all.
I'm sure this is something related to security or cross site scripting, but I'm equally sure there's a way around this. Affiliate banners use flash to do the very same thing (somehow).
View 3 Replies
May 18, 2010
I am designing a site for a music project that I manage.The band also uses another free site, Reverbnation, for promotions and such.The site provides a mailing list function, and you can embed an already provided "widget" onto your HTML web page that will automatically add people to your e-mail list if they choose to sign up.The problem I am having is that the page the widget is going to be on is now all Flash.I can't figure out how to get the widget into the Flash page.The Flash page itself is really nothing elaborate.Here is the code for the widget that they provide:
<img style="visibility:hidden;width:0px;height:0px;" border=0 width=0 height=0 src="http://counters.gigya.com/wildfire/IMP/CXNID=2000002.0NXC/bT*xJmx*PTEy [code].....
View 5 Replies
Jan 29, 2010
not sure where this should go so putting it here? I have created a game through a third party website: [URL] and want to embed it into my own website but it isnt working? the game is stuck on LOADING.
View 1 Replies
Nov 13, 2009
I've searched the web and tried a number of different approaches to embed a font in my Flash movie but each has ended in frustration. I have created several buttons with dynamic text fields that use the font I need. I have added the font to my library, given it a unique name, exported for actionscript and then used the unique name when selecting the font in my dynamic text fields. I am probably not using the right AS code to embed and use the font. What's the easiest way to embed the font? I am also using the same embedded font in a around 5 flash movies on the site.
View 5 Replies
Aug 21, 2010
i'm trying to make a quick and easy personal flash website in a short period of time, and i've decided to use 'pictobrowser' [URL] software to create a slideshow gallery easily (my flash knowledge isn't great and my time is limited!). basically it pulls photo info from my flickr sets and creates a slideshow- but all it gives me is some html coding and i'm not sure how to incorporate this into the flash file so it loads every time the page loads.
[Code]...
View 1 Replies
Feb 24, 2010
how I can embed a video hosted on Vimeo on a Flash (AS2) web page.
View 0 Replies
Sep 16, 2007
Heres a direct link to the swf. (Flash Player 9 Req) [URL] Note that it loads random images to the right.
Now, when I embed this same swf into the actual site: [URL]
I don't understand
I've taken out the new javascript embed code, just to make sure that wasn't messing things around, but to no avail.
[Code].....
If I hard code the php file with the values listed above, everything works perfectly. But I'm using a php script that checks the directory for images, then provides that output.
View 9 Replies
Nov 15, 2010
I have a sample fla file, but I can't find where to edit the scripting in it. Basically there are 2 buttons, each one going to a different URL. I can't figure out where to change the URLs they go to. I've looked literally everywhere in flash.
View 1 Replies
Nov 17, 2010
I'm trying to embed a .swf into a wordpress page. This sounds simple, but it isn't working and I cannot fathom out why. I've uploaded all the relevant files onto the server, and I'm fairly sure all the filepaths are correct. The folder containing the .fla and .swf files also contained an index.html file, which I have put into a template. I've tried putting the supplied code into the HTML on the page, I've tried simply using said template, and the best I'm getting is a blank area which doesn't load the flash content.
View 1 Replies
Sep 28, 2009
I have a SWF wich is 2000 px wide.
I want to embed it so it's centered and it won't show scrollbars or resize even if the page is smaller than it.
Something like this site (horizontally) [URL]
View 1 Replies
Aug 7, 2009
I have been following lee's tutorial on the XML driven mp3 player for a site. However, I have now gone to embed the finished file on an html page, all files for the player work individually, so if I run the SWF by itself it works fine! However, when previewing on the html page the music doesn't play and the titles don't appear. The files are all stored in a 'player' folder in the root folder, however the SWF is stored there too, so I cant imagine that's the problem, I have even tried moving all the files from the player folder directly into the root folder where the index html file is and it still doesn't work.
View 4 Replies
Aug 13, 2010
I am trying to insert a video into an online article using either object or embed code. When I open the html file created by Flash there are scripts included in the document along with the object code. I have loaded the .swf & .fla files onto a server.
I am trying to use just the object code with the full path to the .swf file on the server and then want to insert this code into an article so that the video will display. This is not working. It seems the absense of all the scripts is preventing it from working.Is there an easy way to insert a small piece of code that will allow the video to display?
View 1 Replies
Jul 17, 2009
I'm having a problem with embedding games in my website.[url]...
It shows a loading bar whilst the game is loading, but when I embed this same swf url into my website using swfobject (or even with plain old <object> or <embed> tags), the loading bar never shows up, and instead a white box the same size as the flash game is shown, until the game is loaded!
View 1 Replies
Sep 2, 2010
I have a SWF which I had originally published to Flash Player 7. I added some code which requires me to publish to a min of Player 8. When I test the SWF published to Player 8 it works fine. I can even view the SWF directly in a browser and it works fine. My issue arises when I embed the SWF into an HTML page. When embeded into an HTML page the main functionality of the SWF breaks as well as dynamic text no longer displays. Anyone run into similar problems or issues? I've tried using the simplest of Embeds i could find and it sill breaks it.
View 6 Replies
Feb 2, 2010
I am making a flex app to embed in my ASP.NET portfolio. What is the best way to embed the .swf file into the HTML of the .aspx page?
View 2 Replies
Jan 1, 2011
In the code below what is addvariable doing also i need to embed the swf only in my html page and it is not php. how to embed the swf file in html page
<table border=0 width=100% height=100%>
<tr><td align=center valign=center>
<script type="text/javascript" src="test/swfobject.js"></script>
[Code]....
View 3 Replies
Nov 14, 2009
I have a finished Flash site that my client is requesting I embed a HTML page in it. The HTML page is run by another vendor so I can't just recreate it in Flash and my client wants it to like the HTML page is part of the Flash interface when it launches.
Can Flash do this... call a HTML page and embed it into its interface?
View 1 Replies
