Asp.net :: Prevent An XSS Vulnerability When Using Flex And ASP.NET To Save A File?
Nov 9, 2009
I've implemented a PDF generation function in my flex app using alivePDF, and I'm wondering if the process I've used to get the file to the user creates an XSS vulnerability.This is the process I'm currently using:Create the PDF in the flex application.Send the binary PDF file to the server using a POST, along with the filename to deliver it as.An ASP.NET script on the server checks the filename to make sure it's valid, and then sends it back to the user as an HTTP attachment.
View 2 Replies
Similar Posts:
Nov 14, 2009
There was a recent Flash vulnerability found that allows for the potential of malicious attacks when someone uploads a flash file or a file embedded with flash (for example, a gif overloaded)According to the article, even a simple image can be hijacked.In php, the typical ways of checking a file type are by extension, and by mime-type.Using the simple example of an image, how would php properly vet a file (as is recommended in the article). Mime types can be spoofed, as can extension, and if the file is piggy-backed, what is the workaround?
View 2 Replies
Nov 8, 2010
I have a Flash Professional CS5 project in Flash Builder 4, i'm trying to find a way to prevent it from publishing the FLA everytime I save, I only want it to publish when I actually debug or run it.
Is this possible, it's driving me nuts, I can't do inline checking without saving, but saving means I have to wait for the FLA to publish.
View 3 Replies
Aug 5, 2009
I have a string the user has typed and I want to save it into a file on the users harddrive.
View 4 Replies
Oct 7, 2011
I am trying to save jpg files to my applicationStorageDirectory with custom names.
var filename:String = "visitorimage.jpg";
var file:File = File.applicationStorageDirectory.resolvePath( filename );
var wr:File = new File( file.nativePath );
[Code]....
The image is saved but i need to give the image dynamic name say using a timestamp or random number.
View 2 Replies
Oct 6, 2009
i can able to create StyleSheet object , i need to save that StyleSheet object to css file(in the css format).
how can i do in flex3 Air application , is there any build in library ? Or links available to save as *.css file
View 1 Replies
Aug 24, 2010
is there a way to save, not save as, from an online flex app onto someone's local machine?asically, if a user opens a file local to their machine in an online flex app, is there a way to allow them to save it locally without going through dialog boxes and picking file names?
View 2 Replies
Oct 15, 2011
I will have a list of links to PDF documents in my Flex web app.What I want to do is that upon clicking some button, open SAVE AS dialog for some pdf from the URL list and download it to disk.What I want to avoid is viewing PDF in browser.ALL I know is that flash.net.FileReference will take raw data but no links.
View 1 Replies
Apr 15, 2012
package com.func {
public class Downloader {
import flash.net.FileReference;
[code].....
View 1 Replies
Jun 22, 2010
I need the user of my Flex application to be able to save a snapshot of part of the UI to a local jpg file. I got the screenshot part down - can generate an image out of any given control. However, the only way I see to let the user save the image locally is to send to my server which would return it with the appropriate Content-Disposition.
View 2 Replies
Jan 31, 2010
How do we save file locally in Flash (ActionScript 3) without displaying dialog. I know we can use the following code to save file locally but it prompts Save dialog. I don't want this dialog while saving file locally.
[Code]...
View 3 Replies
Jun 8, 2010
I'm using Filereference.save() to save a XML file. It's working fine with default filename.But is there a way to force a file extension on the saved file? I'm using "untitled.xml" as the default filename, but if the user changes it to say "myfile", it gets saved as "myfile", rather than "myfile.xml".
View 1 Replies
Dec 27, 2010
I wrote these functions which I use in conjunction to scale down some BitmapData and save it as a PNG. However, the scaledImage.draw(originalImage, scalingMatrix, null, null, null, true); line with smoothing set to true does not have the intended smoothing effect when I save the bitmap data as a PNG using the second function. The resulting image file is not antialiased at all. Is there anything I'm doing wrong here?
public static function scaleImage(originalImage:BitmapData, size:int):BitmapData
{
// Calculate the scaled size.
[code]......
View 1 Replies
Jan 19, 2011
We have a Web login feature. We will offer Free calls to a large campaign.
Scenarios:
Because of free calls, we will offer a unique file to be downloaded and stored After a week or month we will call them and offer them our desktop application to scan and see how trusted, the user is If we dont find the same file again, we will never start business and more our own statistics Based on that report we want to do some follow ups campaign We can do this with cookies but we want user experience and trust analysis
Example: if you play a music in youtube.com, without notice your file is actually in /tmp/Flash....flv with lot of data on it.
Question: How can i do the similar using Flex/Flash from the web browser ?
View 2 Replies
Nov 21, 2006
I need to create a notepad in flash.here how could i save the file by prompting the save window?
View 11 Replies
Nov 16, 2010
I wonder how can I download/save/write a file from my server to a client's computer using flash or flex.
Sign up
Sign in
Click on the ("FREE") button placed on the right of the page. (the
orange button)
[code]....
then you'll see a confirmation popup for the download, then you choose where do you want to save the file, and the flash movie saves the file!
View 1 Replies
Jan 2, 2012
I'm having some trouble getting around a security restriction of flex. Saving a file is apparently an action that can only be invoked upon user interaction. The problem is that after my user clicks on the save button, I need to perform a database query to get the data for the file I want to save.
Because Flex works asynchronous, I have to make the database call and then catch the ResultEvent in a different function. In that function, I no longer have the user's mouseclick event. How am I then supposed to save this file?
[Code]...
View 1 Replies
Nov 15, 2009
I am sending out a standalone player that uses an xml driven image gallery. I need to prevent changes to the xml file to stop images being added to the gallery. I can can password protect the xml file to prevent changes, but I also wondered if there was a way to validate the authenticity of the xml file from within Flash to prevent the entire file being replaced?
View 3 Replies
Jul 6, 2011
Can we Bypass the save dialog box of FileRefernce.save()? If not, then Is there any workaround to save a file from web application in Flex without asking user where to save file?
View 1 Replies
Dec 9, 2011
I am using alivePDF to generate pdfs from my flex application. When I click on the save pdf button on my flex application, a "save as" window pops up which allows me to browse to the location where I want to save the pdf file. Its the same window that pops up when we try to save any file in notepad, word, etc. I want to programatically close this window if the user is idle for a given amount of time. The code that I am using for saving the pdf is as follows.
var file:FileReference = new FileReference();
var genPdf:PDF = new PDF();
genPdf = generatePDF(target, generateXML,str);
file.save(genPdf.save(Method.LOCAL), 'graph.pdf');
View 1 Replies
Oct 15, 2009
I have an xml file (externally saved) that is similar to the following:
[root]
[main]
[title]...[/title]
[Code]....
What I like to do is to get what's in [title] tag using HTTPservice, import it into Flex, and save it as array objects, and do the same thing for [content]. This way I can later refer the array object saying title[0] or content[2].
View 1 Replies
Dec 2, 2010
Does anyone know a fix to prevent a flash file from shrinking in IE? I'm only having problems with IE, all other browsers are fine.[code]...
View 2 Replies
Sep 13, 2007
How do i prevent users from downloading the flash file and use them on their own site? there must be some way..
If not, can I atleast prevent them from connecting to my php files?
View 0 Replies
Dec 11, 2009
step1- I got an xml that is locally loaded(works fine)
step2- the content goes into a datagrid that is displayed (works fine)
step3- In AS3 I dynamically add some lines to this xml file(works fine)
step4- I save it locally (works fine)
step5-and want the datagrid to be updated..(works not-so-well)
So, in step 4, the data is saved into the xml file, but in order to finish the save, the user has to click on the "Save as" windows in order to have the file updated of course.. and that's where's my problem, how can i tell flash to wait till the user actually saves the file, before reload the xml file in the datagrid ? here's the code :
[Code]....
View 3 Replies
Nov 3, 2009
If you have two text areas with different styles (fontFamily, weight, color etc) and you copy text from one to the other it also copies the style from the originating text area. Is there any slick way to prevent that?
Here is a sample of code that will illustrate the problem. Type some text in the top box and some text in the bottom, then copy some characters from the top box to the bottom. I'm not using htmltext.[code]...
View 2 Replies
Dec 8, 2005
I made a gallery with an XML file but the problem is that after viewing it on the web and modifying the XML I don't see any difference...it's like I never even modified it...I'm guessing it's because the browser reads the XML file from the cache...how can I make the flash movie read the XML from the web every time it loads?
View 4 Replies
Jan 26, 2010
as you first get to this website, a neat little :10 swf plays. right now, i have a 'home' and a 'back' button on all the pages linked to a static screenprint of where my neat opening .swf ends.
is there a way to prevent that entire opening flash file from replaying again when visitors hit their own browser's 'back' button from the other pages, and just give them the last frame?
View 1 Replies
Apr 15, 2011
When i save the file as an .swf file to view it in my browser the video gets really big (sized the flash document 250x240 px) . How can i easily control my flash video sizes?
another thing: When im doing a video and work with things that are outside of my white document (in the gray area) for instance things that are to be faded into the document and so on. These things also show up in outside of my video when i view it in my browser.
View 1 Replies
Nov 11, 2011
I am working on Adobe AIR application and some test users report to me about same issue.When they try to save the project file from this application, they have no possibility to add any extension (".txt", ".xml" or any other) to the file.
View 1 Replies
Feb 28, 2003
Is it possible to save scores in a text file or xml file locally? Im not creating an online application but rather an application for personal use! I don't want to use cookies since they can be cleared by mistake! It would be really good if it was possible to save the score to an external file!
View 2 Replies
