Actionscript 3 :: HTTPS Vs HTTP Requests From Flash
Oct 16, 2011
I am finding that if I load Flash from a HTTPS page [URL] and try to make a request within ActionScript 3 to [URL] the request does not go through. Same goes for the opposite (accessing https from a http-loaded flash script).
The request is failing, the requested data (passed from a PHP script) is not loading.
Now at first I assumed the trouble was with cross-domain policy files, but I have fixed that issue (I think).
Is there any security policy in Flash (CS5 btw) on HTTP vs HTTPS requests based on where the script is loaded from?
View 1 Replies
Similar Posts:
Jun 11, 2010
First off, I'm trying to fix something that I didn't build to begin with and the guy who's project it was assures me it was working fine when he left, although a version I haven't touched since he left seems to have the same issues. I'm also a bit new to programming in general so let me know if I've left out important information in my first post and I will try to add more info.
I have a flash application hosted on-line that acts as a client for a server application written in Delphi. Most of the communication is done using sockets, which work fine. Uploading data files and downloading results files is done using HTTP requests, which work fine as long as the user is making use of an instance of the server on another computer. However, if the user has the server application installed on their own computer and attempts to use it specifying localhost as the url, the socket communication still works, but the HTTP requests don't.
All the socket based communication works fine and, when it is not on the localhost, all the HTTP requests work fine as well, which is why this is so mystifying to me. I've tried changing the flash cross-domain policy file that the server dispatches to be completely permissive, all ports, all domains, all http-request-headers, and still no luck. The Flash app will sit waiting for localhost indefinitely most of the time until I close the server application, and then give this error message:
[Code]...
View 1 Replies
Jun 17, 2009
Does flash web services allows https:// over http ?
View 5 Replies
Aug 28, 2010
I'm interested if there is some tool (preferably a firefox addon) that allows you to record http requests and view their response header and content.
View 3 Replies
Mar 15, 2012
Here is an issue i'm struggling to solve for quit some time now.I have a python + GAE backend with a flex client that communicates via JSON. I'm using flex's HttpService bound to a Responder with result and fault callbacks. When python raises an exception, I don't seem to get it in flex. I did some research and found out that the problem probably lies in the fact that the flash runtime cannot handle http responses with status code other than 200.
View 1 Replies
Sep 20, 2010
I have a Flash Movie (SWF) that is consuming a .NET WebService (located on the same domain) and in my Test environment everything works perfectly (Test env is all HTTP).
When deployed to production (All HTTPS) an issue occurs when trying to access the WebService from the Flash movie.
A new WebService object is created with the HTTPS url passed to it.
myWS = new WebService("https://mydomain/path/to/webservice")
As I watch the HTTP traffic in FireBug I can see the Flash movie making a POST request (passing along the SOAP data) as HTTP (not HTTPS as I would expect). This HTTP requests hits the firewall which forces a 302 Redirect to HTTPS. After this redirect occurs, Flash/Firefox re-sends the request to the HTTPS version of the URL, but as a GET request (thus losing all the SOAP data and making the call to the WebService invalid).
I am trying to figure out how/why a Flash WebService would call a WebService using HTTP even though I am specifically passing it a HTTPS url.
View 2 Replies
Oct 11, 2011
Unfortunately, Flash Player doesn't support using request headers with GET requests, as noted here, due to what Adobe terms "browser limitations": Due to browser limitations, custom HTTP request headers are only supported for POST requests, not for GET requests. That means I need to create my own HTTP socket class from scratch and find a way to run a policy server on the machine I'll be querying. Hooray.If I want to make a simple GET HTTP request with HTTP-Basic auth headers, what do I need? I'd need something like
socket.write("HTTP GET REQUEST PAYLOAD HERE");
socket.flush();
What do I put in the write method to compose a GET request?
View 1 Replies
Nov 13, 2010
there is an issue i am curious about very much. when i develop a flash application or web site, http posts and requests, links etc.. everything can be seen with add ons. what do you suggest for this issue? i cannot find any good solution, what solutions to be used generally?
View 13 Replies
Jan 20, 2010
Is it any way to prevent user to go to specific web-pages using Adobe AIR framework.I want this software to run at startup and not allowing user to surf some web parts.I want to use Adobe AIR beacause of its crossplatform capabilities.
View 1 Replies
May 29, 2010
To put it short, I have an MP3 player on my website coded in flash which plays MP3 files located on my server. What I want to do is give my flash player its own user agent, then in my .htaccess file I will deny the MP3 extension to everything except that user agent. I already have an idea planned using PHP to pass the user agent to flash (to stop reverse engineers getting user agent).
To cut a short story shorter: Is there any way that I can change the user agent flash uses on HTTP requests?
View 2 Replies
Dec 21, 2009
I am building a FLEX web application that also has a payment module where the user needs to enter his credit card details.
The whole Flex application runs on HTTP. However, whenever the user lands on a page where we ask for credit card details, we want these details to be sent over HTTPS.In this page we need information from the model of the application, because it holds certain selection the user did, the state the application is in, etc.
Do I need to make this page a Module that runs on HTTPS?
Or can I just configure the specific 'credit card' services (we have a JAVA back end) so that these run on HTTPS?
View 1 Replies
Feb 21, 2011
I run a facebook game that makes http web requests to my server using AS3's URLRequest and URLLoader classes, then takes the json data that the server spits back and and processes it it, etc etc.. Lately I've had users complaining about server requests that never come back. They perform and action and the game just kinda hangs there waiting for a response indefinitely. If it were just every now and again I would blame it on the server just dropping the ball every so often, but some users complain about having this problem consistently at the same exact spot, while others don't get it at all.
The part that bothers me the most is that no matter what I do I cant reproduce the issue that they are having. How can I diagnose this issue without being effected by it? I'm stumped. what might be going on, or anything that I can do to get more information on what might be happening?
View 1 Replies
Oct 7, 2011
A web channel streaming service streams to a certain IP range, it only checks the IP in example.com/cmd.php?id=xxx (channel number) and outputs an rtmpe stream URL, nothing else.How do I trick it to get my local URL instead of the one on their server? I have considered squid proxy, but is there some way to do it with a firefox plugin or greasemonkey script?
Edit:I will try to specify:It's a streaming service from an ISP and cable provider. They stream for free to people on their IP's. On their webtv page, which is called webtv.example.com, there is a flash player. If you are not on an IP from their ISP, you can't stream anything but the test channel.When you try to change channel via. javescript:videoplayer_changechannel(xxx) it makes this HTTP request:
[URL]
If you are on one of their IP's you will get an RTMP URL, like this:
[URL]
This is what the flash player requests, and if it get's this response it load the channel requested. There is no HTML on the php page, just the URL. Note that the rtmp URL is static.If you are not on one of their IP's it will return a random sentence (something stupid, the programmers having fun).I wan't to trick the flash player into getting the right value, even though it's not on one of the ISP's IP's.
View 1 Replies
Sep 19, 2011
I'm having a problem that I'm not sure is necessarily tied to the Flash, but I don't know what the root of the problem is yet.I have a SWF that connects to a socket using the Socket class. This works fine.I'm also making (jQuery) $.getJSON() requests to load certain page data. This works fine.
However, when the Flash socket is connected the Ajax requests stop being sent. By this I mean that it seems that the HTTP requests being made are stored in a queue while the socket is connected. As soon as I disconnect from the socket the HTTP requests continues to load fine. The HTTP request never times out (as it's not even being sent to the server), but just hangs there waiting...until I close the socket connection.
I've verified both in the jQuery and Adobe docs that both the Ajax (JSONP) requests and the connections using the Socket class are asynchronous, so I'm really confused as to why the socket connection would block the HTTP requests.
View 0 Replies
Jan 24, 2011
My swf is being served via http protocol. I don't really see this being easily changed. There's a resource that a website has opened up via their api that I need to access but it is using https protocol. Because of this my swf can't access the resource because of security settings.
Option 1 would be to serve my swf via https. I can't do this at the moment.
Option 2 would be set secure="false" property of the cross domain policy file. I can't do this, I dont have access.
View 1 Replies
Jun 17, 2009
I've been trying to find the right configuration for supporting both http/s requests in a Flex app. I've read all the docs and they allude to doing something like the following:
<default-channels>
<channel ref="my-secure-amf">
<serialization>[code]..........
I'm running with Tomcat 5.5.17 and Java 5.The BlazeDS docs say this is the best practice. Is there a better way? With this config, there seems to be 2-3 retries associated with each channel defined in the default-channels element so it always takes ~20s before the my-amf channel connects via a http request. Is there a way to override the 2-3 retries to say, 1 retry for each channel?
View 4 Replies
Feb 19, 2011
So I want to read http streams using flash tcp sockets. I do not really need the http header at all - all I need is body which contains flv. so how to read http response body into byte array using flash sockets?
View 1 Replies
Feb 19, 2010
I have a Flex client that loads data from a server to display a chart. This data may change, so the client regularly repeats the request. Since the result may require some work to retrieve, I'm going to have the server detect if the result has changed, and issue a 304 status if it hasn't.I haven't seen any headers in the Flash Player's requests which would indicate that it's already handling conditional GETs. Also, the HTTPService API doesn't seem to provide anything, either. Does that mean, Flash can't do this, or how can I implement this myself?
With regards to cookies, which aren't supported in Flash, I have heard the suggestion to build my own HTTP client on top of the Socket class. This might solve this issue, too, but frankly, I'm really not keen on doing that.As an alternative, I could just cache the result page and send it again, but so far, the API tries to utilize semantics that are already built into HTTP, and I'd like to keep it that way.
View 2 Replies
Sep 13, 2010
I have a big loop in actionscript that sends lots of data to an url:
for(var i=0;i<1000;i++) {
var request:URLRequest = new URLRequest();
request.url = url;
request.method = URLRequestMethod.POST;
request.data = data;
var loader:URLLoader = new URLLoader();
loader.load(request);
}
The problem is because URLLoader can make only asynchronous calls, it sends all those thousands requests at once which kills webserver. Also it acts a bit strange on top of that. Lets say the loop is running for 5 minutes. For whole 5 minutes there is no requests coming to web server, then at the end they all are sent at once. I already tried everything I could possibly think of (empty loops, callbacks, delays) - nothing works. All requests are sent at once no matter what. How to make requests synchronous, so it will send one request after another?
View 1 Replies
Jan 18, 2012
I export a swf/html direct from flash, very simple. I upload it and it works fine in all browsers. If I change http to https in all browsers, no problems.
All browsers except IE - when I change http to https, I just get nothing - if I right click I get "Movie not loaded..." (greyed out) and the usual about flash player.
I've reinstalled my flash player, read loads of tips and tried loads of other hacks but nothing seems to work.
I am using IE 9 (for testing only)
<div id="flashContent">
<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="562" height="300" id="banner" align="middle">
<param name="movie" value="banner.swf" />
[Code].....
View 1 Replies
Dec 4, 2009
The main top section of the site is a little Flash thing that has buttons as links to different areas of the site. All of that is well and good, but whenever I click those links, it has to reload the entire page (including the Flash app) when only the bottom part changes. This isn't really a huge issue, since everything's real small, but it's kind of annoying.I vaguely remember "fixing" this behavior using AJAX during my web programming class, but that was just straight HTML and Javascript, no Flash players to muck around with.My question is, how do I overcome having to reload the entire page when someone clicks a link from the Flash object? Is there some nice way I can call something other than getURL() to achieve this effect?
View 2 Replies
Jan 25, 2010
As you might know, browser's security model does not allow a script loaded in a page from http:[url]... to make cross-domain requests (no AJAX calls to any other domain other than url...).The Javascript file itself could have been served from a different domain altogether (url....) and that is irrelevant. This is the Same-Origin Policy.
Flash also has something similar? But does Flash treat the origin to be the HTML page where the .swf file was loaded or origin is the domain which served the .swf file?
So http:[url]... loads a .swf file from http:[url].... Now .swf can load resources only from [url].... or only [url....? I'm assuming there are no cross-domain.xml files setup on either [url]....
View 1 Replies
Nov 24, 2009
I have trouble uploading files with SWFUpload when target servlet is listening on HTTPS. On HTTP it works fine.The issue is only when using FireFox or Opera. On IE it works fine - not tried other browsers.
EDIT:Error message as provided from SWFUpload when in debug mode:
*SWF DEBUG: Event: uploadProgress (OPEN): File ID: SWFUpload_0_0 SWF DEBUG: Event: uploadError : IO Error : File ID: SWFUpload_0_0. IO Error: Error #2038
SWF DEBUG: Event: uploadComplete : Upload cycle complete.*
View 5 Replies
Dec 4, 2009
Is it possible to use the flash.net.NetConnection object to connect to my Flash remoting enabled web application over HTTPS within Tomcat or any other servlet container?
I am using the SpiceFactory cinnamon project for amf remoting and have searched for examples of using HTTPS but see only the reference to a proxy type in the NetConnection object.
If someone could provide a reference or example that would be awesome. Or if it is not possible using the flash.net.NetConnection object are there any recommendations of how to configure HTTPS for the spicefactory cinnamon library.
View 2 Replies
Jul 14, 2010
I am using the google maps API with regular key (not premier).When connecting to my server with http, everything works fine, but when connecting with https i receive the following instead of map: initialization failed please check the API key swf location, version and network availability.Is that because it is not premier key? can I force the google maps API to use http instead of https so that I will receive the maps?
View 2 Replies
Aug 18, 2011
we are trying to use our player over https. I am detecting the protocol and then setting the secureConnections to true if it is https however it is still throwing a SecurityError, here is the setup code.
[Code]...
View 1 Replies
Sep 14, 2010
I have a Flash based game for the browser which sends users' scores to a php backend script which stores the score and the user id in the database.
Now I have a url like www.example.com/update.php?score=200&uid=234
The problem is that this is very much exposed to an intelligent user, and he can use this url to store whatever score he wants in the DB. Also there's no real user authentication, and I don't intend to have one either, because it's really a tiny game.
How can I stop someone from calling the above url and updating his score on his own.
View 2 Replies
Jan 24, 2011
I'm using YUI file uploader based on flash, and the flash requests host/crossdomain.xml file. I'm requesting localhost and it requires this file. I was using this before and I have never had this problem and I've never had this file on my server.I've never used any adobe technologies, could please anybody tell me if it is possible to turn it off somehow ?The problem is that I can't have the file on my server, at least at root location...
View 2 Replies
Aug 20, 2011
I am hosting images on Amazon S3 and using them in my Flash application. My application receives signed S3 urls that point to the images in S3. The URL looks something like this (line breaks added for clarity):
[Code]...
The problem here is with the + sign that can occur in the Signature. If I send the + sign as-is, then the browser thinks that it's a space, as it should according to the URL specs. Really, S3 shouldn't use + signs for this reason, but it seems to be something they overlooked. Normally this isn't a problem since you just replace the + sign with a %2B. However, Flash has some default behavior that makes this difficult.
From what I can see, the URLRequest object is setup to always encode URLs as if it was passed through the encodeURI function. I don't see any way to turn this off. Unfortunately, encodeURI doesn't encode + signs, but it does encode % signs.
This means that if I leave the + sign in there then Flash leaves it alone and S3 thinks I have a space in my URL. If I use %2B then Flash turns it into %252B, due to encoding the
View 1 Replies
Dec 18, 2011
By far the weirdest thing I've ever seen. On some machines (!) IE (!!) attempts to load an SWF file via HEAD request instead of GET. This happens only when the page is running in Facebook IFRAME application - when running solo works fine. Naturally, on FF and Chrome everything works just fine. The SWF is embedded using jSWFObject. There's no visible common feature to the machines which experience this problem - laptops, desktops, XP, Vista, 7.
View 1 Replies
