Professional :: Local Sandbox Versus ExternalInterface
Aug 19, 2010
So I wrote a CS4 Illustrator plugin that loads a SWF as its user interface. Works great on the mac, but I am having a problem on Windows:The .swf needs to be compiled with the "-use-network=false" option set in order to access some files on the local machine. HOWEVER when that option is set, all of my "Externalinterface" calls break down. When "-use-network=false" is not set, then I can't access the local files, BUT my "externalinterface" calls (which communicate with the plug-in) work just fine.
The SUPER frustrating part is that
A) it works fine on the mac, and
B) on window, I don't even need to set the "-use-network=false" option for the swf to access the files IF the .swf is loaded in explorer.I'm not sure if using AIR is possible, but I'm trying that next since AIR can access both local and network files without all the sand box hokey-pokey.Also CS5 is not an option for me for this project.
In Flash, if I Test Movie in normal mode (Ctr + Enter) I get no complaints about accessing URLs. The SWF's sandbox is "localTrusted". However when I debug Test Movie (Ctr + Shift + Enter), the sandbox is different. I then get complaints about accessing URLs; Security Sandbox Violation "...Untrusted local SWFs may not contact the Internet..." if localWithFile, and "...denied due to lack of policy file permissions..." if localWithNetwork.
Is this a "feature"? If so, I'd like to be able to turn it off. It would be nice if there was simply a warning, and not actual failure. To fix it, I could trust the file using global trust settings, but that seems silly just for debugging.
Although I will mention Dreamweaver it is still a flash question. When I test locally through dreamweaver in Internet explorer the address bar says "D:My Docsetc." when I test in firefox it says "file:///". Now I know how to say if it is local with the "file:///" but not with the direct path. How do I reference this in Actionscript?
Here is my code: Code: var setURL = new Array("http://local", "http://127.0.0.1", "http://localhost", "file:///"); How do I make the direct path in IE apart of the array? I tried "D:" it did not work.
We are a research group from the University of Zaragoza (Spain). We are developing educational games for children with special needs, (in particular, with)social and cognitive disabilities. We develop our games with Adobe Flash CS5, so we are enough handy with Action Script language.The emerged problem is related with the security sandboxes in Flash.
At the moment, we are designing a new educative application where image and sound resources come from the Internet, using web services through a "loader.load(new URLRequest(name))" command. We are using the adequate crossdomain file, and it is working fine when published on the web.HOWEVER, now we are thinking on developing a desktop educative application, where educators will configure the game, and keep their work in a local system file. This is where problems arise. As the Flash player sandboxes limits us to "only network", or "only local file system" use, we are not able to access the Internet and to generate local files at the same time.
We are not trying to make a flash virus, we are only trying to make an application for educators, where resources came from the Internet but the application requires access to local file system in order to let educators to save and to load their work in their disk.Reading the Adobe doc, we found the different flash player sandboxes: http:[url]....
It seems that there is a sandbox which enables us to both access internet and local files:"Security.LOCAL_TRUSTED—The SWF file is a local file and has been trusted by the user, using either the Settings Manager or a Flash Player trust configuration file. The SWF file can both read from local data sources and communicate with the Internet." And it seems that Local_trusted SWF files are set by the final user or by installer programs. As we intend to publish the application on the web, and educators will download the application, the installer programs seems a nice option, but we are not able to find info about SWF installer programs.
On the other hand, we know about the Adobe Air solution. We understand that AIR is a substitute to Flash Player. It seems adequate as it will expand our application to other environments like android IOS (tablets, mobiles, ...).The question is: using AIR, would we gain network and local access in our SWF application? And what about the final user? Would he/she be able to download the SWF from our web, and any kind of AIR player and executing our application in an easy way on the device? Finally, what do you think is the best solution for the kind of application we are aiming to?
Goal: to make possible to make requests from flash running on local protocol (widget://, file://, chrome-extension://) without any special permissions on [URL]
Supposed solution: proxy swf file loaded in page with widget:// or file:// or chrome-extension:// protocol which loads into itself swf file located on http server. local swf bridge conects its own external interface to http swf file external interface.
This solution used in youtube movies, so you can embed any youtube movie into local page and it will be shown and played fine;
At the end we can get working soundmanager2 [URL] opened localy (file:// protocol), which can load and play music and video from internet. I need proxy for this version [URL]
Some relative [URL] How do I call a Flex SWF from a remote domain using Flash (AS3) ?
I need this to play music in opera extension (using widget:// protocol) for my project [URL] to let users play music without setting up special permissions
Is it possible to turn off sandbox checking when developing on a local machine? I know this could never be allowed on a production version but publish and upload after every edit?
I have a problem with ActionScirpt. When I log in to MSN, it displays me an error: SecurityError: Error #2060: Security sandbox violation: ExternalInterface caller at flash.external::ExternalInterface$/_initJS() at flash.external::ExternalInterface$/addCallback() at user_data_fla::MainTimeline/frame1() it makes using MSN impossible. The problem has been from the very beginning, and my computer is just a week old... I'm not really sure if I have ActionScript 3.0 or ActionScript 2.0 but it's a new computer with Windows 7 Home Premium 64-bit.
I thought this question would answer my question, but I have applied the following fixes:
.as Security.allowDomain("*"); Security.allowInsecureDomain("*"); html param name="allowScriptAccess" value="always" />
[Code]...
And I am still seeing the ExternalInterface.addCallback method fail locally. It works on a web server, or in the dev folder. But not in an arbitrary local folder.
I am running into an annoying problem with Flash, particularly when I run my program in Debug. Basically I have an AS3 project at some location on my computer (c:/.../Flash/Project/project.fla) with a main script for it (c:/.../Flash/Project/code/projectMain.as). If I try to load in SWF files or JPG files from other places on my computer, I get problems. For example if I try to load files like:
[Code]...
It seems to load them fine. When I click on the movie though, I get this in the output: *** Security Sandbox Violation ***SecurityDomain 'file:///C/.../file.swf' tried to access ncompatible context 'file:///C/.../project.swf And the whole thing stops working. I have read about the security sandbox and allowDomain calls and all that, but I don't see how the domains are different. I am not deploying this to any server or anything, just trying to run the debug swf. I have access to local files by default, right?
Fonts should be embedded for any text that may be edited at runtime, other than text with the "Use Device Fonts" setting. Use the Text > Font Embedding command to embed fonts.Attempting to launch and connect to Player using URL D:iagora ovoguestgbook_v5.swf[SWF] D:iagora
AdobeTV showed a way to allow Flash to "talk" to an HTML page via javascript using the ExternalInterface method. There seems to be a catch. You need to use the ID of the swf in the parameters to have it all fit together and you can only put the ID="swf" into the IE section of the Dreamweaver generated javascript or into the non-IE section. Putting it in both didn't work and the author mentioned only putting in one of them specifically.Is there a way to do this that would work in both sets of generated Javascript?
I get following error: Error #2044: Unhandled securityError:. text=Error #2048: Security sandbox violation: [URL] cannot load data from 192.168.3.5:4854. at TicTacToe_fla::MainTimeline/TicTacToe_fla::frame1() ". I tryed to solve this problem about 3 hours, but I failed I have the file crossdomain.xml in the same folder like my .swf file on the server with this content:
is there any way to delete all shared object data for a domain? We used generated names for our swfs and over time it has created enough to reach the 100kb limit for our domain, creating the user prompt. AFAIK, I cannot access the path above catOrgan_3342.swf to clear the other dirs catOrgan_3341.swf catOrgan_3340.swf etc, nor is there a global clear, or a way of enumerating the subdirectories.
Application DataMacromediaFlash Player#SharedObjectsQBX3423www.fluffycats.comcatOrgan_3342.swf<m y files>
i have the problem of local files of flash not working in any browser. to explain further i have html pages with headers in flash in my hard disk with links of the connecting pages. when i open such pages in any browser the links dont work. the page just stays as it is. when i click on the links only the state of the rollover changes when clicked on a link. the links when clicked dont go to the linked page. but when i upload these files to the server, they open and work perfectly in any browser.
I'm using Flash CS4 & Actionscript 3.0 to create a grid with different objects that a user can move with the mouse. This is a standalone application meant to be used on a Windows machine. Is there a way to download and save the user's responses (viz. location of mouse, type of object clicked, etc.) onto the local computer without using the Flash Debugger?
I came across an article [URL] which states that it is possible to save local data onto a user's computer without a backend script (e.g. php) in Flash Player 10 but the article doesn't really say how this is done.
Is there still really no way to use the Flash Player, whether embedded in a web page or as a projector, to record video files to a local directory on a user's computer?I understand that this is potentially a security nightmare, but I thought Adobe had worked around those issues.
I created a flash movie and published it to get the html file and the swf. The html file works fine on my local computer that I created it on but I went to email the html file with the swf file, the links within the movie are not working?
We're using External Interface for interfacing between Flash and JavaScript on the HTML page. All works fine online. When we try to localize the pages though (so that a Salesperson can have a CD full of demos), none of them seem to work.Is this an over-sensitive Flash security issue? We already have allowscriptaccess='always' and swliveconnect=true in the object/embed tags.
What can we do that doesn't require changes on each individual machine to set trust paths or any other kind of browser configuration? Not only do we want to have this content working on the machine of a salesperson, we may get clients that want to deploy content offline (kiosks, machines without any network access).
How do I request a local file in ActionScript 3.0? I am using [URL] tutorial to create a light box and I would like to know how I can replace the URL in the tutorial with a local file.
Trying to set up a getURL to link to a local htm file, NOT a page on the internet. All the tutorials I have read tell me how to link to a file on the internet I'm trying to set up an intranet site for my training college where students can access training resources etc on the local network. Therefore my getURL needs to point to a local file, not one on the internet. I'm trying to link to a .htm file that resides on my computer. Does the htm file have to be in the same folder as the .fla file?? How do I do this?? I'm working on a Mac, Os X, MX 2004, if that makes any difference.
I am having trouble seeing my flash video on the server. I just see it in my local computer. I save everything and then preview it, copy the code and insert on the bottom site, and no video. Just the skin appears when you roll over the code. [URL]
I have everything in the same folder, I have added the mime types on the server, and it still don't work.
I am having trouble seeing my flash video on the server. I just see it in my local computer. I save everything and then preview it, upload the file to server, but it just don't show at my website.
I am a developer in Web Flash Game.(I use AS3.0) I want to save and load the swf-file to a local disk of any user,Because I want to decrease the time for loading a flash movie from site.Is it possible?If it is possible, I hope the swf-file has only one loading from site and it will be loaded from a local disk of any user after that. (I know a concept of Internet temporary file. I want to know the other techniques of only using AS3.0.)
I'd like my application to be pretty light so it loads quickly. So i'd like to place all my assets (XML files, graphics, etc) outside from the main Air file and when the main Air file is loaded into memory, I'd like it to load in the asset files at runtimeSo how do I go about telling Flash builder to save my asset files locally when it packages my Air Application and also ensure I can access these files while debudding my application?
I've created a small application that is loaded by a preloader. The preloader loads the app then loads some json data it passes the data to the application and then puts the application on stage. Everything works fine in FDT 4 but once I put it on a server it gives me this error - SecurityError: Error #2028: Local-with-filesystem SWF file. Does anyone know why its happening and what setting I need to change to stop it? I have set the load arrguments -use-network=true and false to no availe. The json data is coming from an external web address when I change and put it locally with the application I get SecurityError 2148.
