Global Security Manager In Flex?
May 31, 2010
I made a swf that interacts with other site on the internet (which has a crossdomainfile for me).in the main.mxml there is a definition of webservice (mx:WebService)(which is not in my domain). Therefore when loading the swf, there is a first call to crossdomainfile.xml.I put this swf on my server so that my clients can get it.
When i connect to my server to download the swf, i expect to be asked if i want to allow the swf connect to foreign webservice domain.Do i always need to define exception in Global Security Settings panel?I don't want my client do define special things..Is there a best practice for that? Why when i surfing the net other swf can do this? I read about the FlashPlayerTrust, can i define there a website i trust my swf will connect to?
View 3 Replies
Similar Posts:
Aug 30, 2009
I've had a problem which has been persisting for a long time now - Flash won't save any cookies to my computer. Originally I thought that it was my security settings, and indeed when I went to the global settings manager I clicked the "unlimited" option for data saves and allowed this for all sites. But when I reloaded the page the changes hadn't been saved. No matter how many times I clicked on the options to allow cookies and give unlimited data storage, whenever I came back the settings had reverted to default, as I had found them originally.
And when I went to C:/Documents and Settings/[user name]/Application Data/Macromedia/Flash Player#SharedObjects/ I found that there were no folders there, for none of the sites that I had visited.
This problem persists on IE, Firefox and Google Chrome. I've shut off all adblockers, all firewalls, all anti-virus software, uninstalled and re-installed Flash twice and still nothing. I'm at my wits end. I'm running Windows on a PC.
View 1 Replies
Sep 8, 2011
I came to the point where I need to communicate between 2 objects (let's say Tank and the Cannon). It is tile game, and when the Tank approach specific tile I need my Cannon to shot the Tank. When Tank gets that specific tile I want to dispatch some custom event and have listener in Cannon class body to make the shot happen. Other way I would have to check in ENTER_FRAME loop (inside Cannon body class) if the Tank touched tile that runs the Cannon shooting - but this is not elegant and efficient. The issue is complicated by the fact that the Cannon and Tank are added to the Engine (document class) and can't simply hear for each other, because they seat on the same level in display list.
Initially I could addEventListener to the Engine, but this way my document class would enlarge to the XXL size (all listeners functionality, all methods for game etc). What I would accomplish is to have event listener in every Cannon object (defined in body class) listening for Tank's dispatching the event. I saw some 'Centralized Event Manager' article in the net, but can't download full classes [url]...
View 1 Replies
Dec 4, 2009
I have created an swf that manages to get all urls assigned to the buttons. When I publish the file I set the global security to allow that file to work and all links work. My question is when I transferred the html and swf to a new pc none of the buttons worked I was not even given an option to update global security settings by adding a new location. If I was to load this swf to an ftp media server is that the location I need to allow and can I only do this from the original PC where the file was created as transferring it seemed to make the buttons not do anything.
View 14 Replies
Sep 11, 2011
In my application I am accessing a XML file which is in the same location as the fla, yet I have to add my folder location to the Flash Global security settings in order to avoid that infamous Security violation that is thrown. Thats fine in my development environment, however when deployed on a customer's machine they have the same issue. Is there a way programmatically to to trust the xml file and avoid the security violation? NOTE the customer is accessing the swf in 2 ways through a .NET loading mechanism and 2. opening the file location in a web browser (NOT in a we page but opening the swf directly - YES I know this is not recommended - but nevertheless is the customer's preference)
View 2 Replies
Aug 28, 2006
i just want to ask if there's a way to avoid the trip to global security panel to access local .swf?
View 3 Replies
Dec 20, 2009
I'm having trouble with an AS3 AMF RemoteObject request that is hosted on App Engine. I have a crossdomain.xml file in the root of the domain, and also one at the remoting endpoint.Here are the contents of the root crossdomain.xml:
<?xml version="1.0"?>
<cross-domain-policy>
<site-control permitted-cross-domain-policies ="all"/>[code].....
Loading the swf file and testing it on my machine works just fine... I think that may have something to do with me having the debugger version of Flash Player. When I push it up to App Engine to make it public, other clients access it and get a Client.Error.MessageSend Channel.Security.Error error Error #2048 url: http:[url].......I am using Flex 4 beta, and the App Engine Python runtime. I have tried full wildcard in the crossdomain, and even accessing the data endpoint at a relative URL so as to avoid this error.
View 1 Replies
Sep 7, 2010
I'm struggling to get around an error that is constantly thrown in my application when I press the tab key.
I have a modal dialog box that contains a form with 3 form items. Whenever I press the tab button flex throws an error saying
"ArgumentError: Error #2025: The supplied DisplayObject must be a child of the caller."
I've tried setting up a focus manager in the initilize handler of my title window to no avail
private function init(e:FlexEvent):void
{
focus=new FocusManager(myform);
focus.setFocus(firsttextfield);
[Code]....
View 2 Replies
Jan 27, 2012
I'm trying to detect when pop ups are visible (including tool tips if possible). The reason is that I need to hide or freeze (capture a snapshot) the Stage* components (StageWebView, StageVideo, StageText etc) when pop ups appear.
View 1 Replies
Dec 8, 2011
i want to know whether its possible to change the local settings manager of flash programatically?. Earlier when the global settings manager was there i changed the settings by directly editing the .sol file? Will the same work now?
View 1 Replies
May 27, 2009
I have a flex application that uses BrowserManager for Deep Linking.
But whenever the # changes the new hash fragment gets appending to the bottom of the page. In IE it is inside a frame that says "Hidden frame for Browser History support." I didn't even know it worked that way. But anyways it is not supposed to be showing up visibly on the page but it is..
View 1 Replies
Mar 29, 2011
I'm making a Matching Game where I have some images on my left and I can drag them onto images on my right and if they are matching, they should both disappear from the stage.
[Code]....
findMatch() is a function that finds in my XML file the path of the file that matches the file that is being dragged. Having that path, I send it to dragEnterHandler where it compares it with the path of the dropTarget file and if they are the same, it accepts it. Then in dragDropHandler, I'm changing the source path of my second image to "", so that it disappears from the stage. How can I access the first file (the one that was being dragged), so that I can change its path to "", to get rid of it?
View 1 Replies
Apr 2, 2010
I have some filters set up, and have assigned some global vars to them, which I then use in my Filters code to display the filters: myText:Filters [globals.data.glow1, globals.data.stroke1, globals.data.shad1] Works perfectly. Now I want to assign a global var to each global filter var to determine if it should be shown or not. So...
[Code]...
View 7 Replies
May 19, 2009
I am getting a strange problem while I am making my release build swf.The swf is supposed to make some internal server calls and then display the data and also play it.When I make a release build swf and excute it, while making server calls it throws exceptions likeSecurityErrorHandler: [SecurityErrorEvent type="securityError" bubbles=falsecancelable=false eventPhase=2 text="Error #2170: Security sandbox violation:file:///Path to the swf/WebPlayer.swf cannot send HTTP headers to **Method Name to bring data from the server***]And after this nothing can be done as everything depends on the data from the server..I have updated my cross-domain.xml on the server to support the master-only policy file but that also didnt ..My cross-domain.xml is
<cross-domain-policy>
<site-control permitted-cross-domain-policies="master-only"/>
<allow-access-from domain="*"/>
[code]......
View 5 Replies
Apr 17, 2009
I haven't fully grasped how the flash security model works, and now I've ran into a problem. I have a base SWF that loads a game loader swf, which in turn loads the actual game.What I'm trying to do is taking a current bitmap snapshot of the running game. This works fine before the loader swf has loaded the game. When the game is loaded, I get a security violation because the game has images pulled from facebook. Is this something that can be solved on my end, or restricted by security in the game swf?
View 2 Replies
Apr 7, 2011
How can i settings crossdomain.xml my flex project.* this is my crossdomain.xml.
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
[code].....
I've tried lots of different methods but my project send error message "Security error accessing url Unable to load WSDL. If currently online, please verify the URI and/or format of the WSDL [URL]"
put the file in different places
C:wampwwwMYPROJECTin-debugcrossdomain.xml
(my swf url : http://localhost/bin-debug/test.html checked http://localhost/bin-debug/crossdomain.xml its ok)
C:wampwwwcrossdomain.xml
I added the load line of the project
protected function application1_initializeHandler(event:FlexEvent):void
{
Security.loadPolicyFile("http://localhost/MYPROJECT/bin-debug/crossdomain.xml");
}
if flex server type select none everythings ok. but server type select PHP need crossdomain.xml how can i fix.
View 1 Replies
Apr 28, 2004
Is it possible to make global functions, much in the same way you make a global variable, reachable from anywhere in the project?
View 1 Replies
Jan 18, 2011
I am using modules in flex, to build different parts of my webapp. What I need now, is a way these modules can communicate with each other on events. What really is happening is ,that there is a central module, which then will take care of loading other modules and passing data to and fro. But, coding for each part to delegate events to each of these loaded modules from the central module and back would be a big nightmare.
What I really want to do is have a global event bus for it. Are there any specific libraries, already existing for such a process. Also, I would be using MVC, so it should also take care between events form the model to the view and vice-a-versa.
View 3 Replies
Feb 20, 2012
I have a texInput component,which is placed inside containers like following
<s:BorderContainer ...>
<mx:VBox ...>
<mx:HBox ...>
<mx:TextInput ...>
[code]....
Now after initialization i want to get the location of my textInput with respect to Application.I tried with with localToGlobal(PointofLocalCoridnate), then it is not giving the correct location of textInput.
View 8 Replies
Jul 7, 2011
I'm using a Amf channel , How to add security to My channel..
View 2 Replies
Apr 15, 2010
I am trying to load external SWFs in my Adobe AIR App. The loaded SWF is trying to access an URL to retrieve some informations via XML. When starting the SWF by itself it works fine. When loading the SWF from the File.applicationStorageDirectory i will get an Security-Error because the loaded App is executed in a local-with-filesystem Sandbox appareantly. First Question: Is there a way to change this? That the loaded SWF is running in a network Sandbox?
Since that first attempt didn't worked i've moved the SWF to the app:// directory.Now i'll get a Security-Error because there is no policy file on the Server available where the XML data should be retrieved. Second Question: Why is the policy file not necessary when running the SWF by itself, but is necessary when trying to load the data from the application Sandbox? What am i doing wrong?
View 1 Replies
Feb 15, 2011
I am very new to flex, i have created a simple login page in flex and created a webproject in Eclipse having a jsp page. i have put that jsp page in tomcat webapps. Now when i run an application of login from FlashBuilder it runs fine as i have given the ip e.g [url]... and passing it as a url in HttpService and it worked fine. but when i put my login.swf file in webapps same in that folder where that jsp resides and un e.g [url]... it displays the page but when i click on the login button it gives me with this error "Security error accessing url"
View 2 Replies
Mar 4, 2011
If you create a popup via:[code]It will create a popup and bring it on top of any other visual piece. I have one problem though. This 'popup' needs to stay up even when the user interacts with the background.I would use modal, but I need the ability to interact with the back. Any way to tell the popup manager not to remove the popup when the user clicks off of it?
View 1 Replies
Mar 8, 2011
I am trying to use global application states to manage roles in my application. How can I use <properties.state> everywhere in my application if I declare it in my top level application?
View 1 Replies
Dec 15, 2011
I have a texInput component,which is placed inside containers like following
<s:BorderContainer ...>
<mx:VBox ...>
<mx:HBox ...>
[code].....
View 1 Replies
Jul 22, 2009
i defined the global variable in the first frame of my file, and i can access it on other frames, however i am trying to access it within a movieclip, and flash is telling me that it is undefined. does anyone know why this could be?
View 1 Replies
Jul 31, 2009
I have a project which loads different info from xml files. everything were working good until something happened one hour ago... Flex started to refuse to load any kind of information from outer files... no matter where they are store, on server or in a same directory. When i say flex I mean when inside flex i press Run or Debug. He just stops working... I mean throwing error about security sandbox violation. It's also appeared that this is not for one Flex Project, but for all Flex Projects what i have.
View 4 Replies
Nov 22, 2009
How can Nginx serve crossdomain.xml file to a flash/flex program. Basically I need to make nginx to respond to:
perl -e 'printf "<policy-file-request/>%c",0' | nc 127.0.0.1 80
with
<cross-domain-policy>
<allow-access-from domain="*" secure="false" to-ports="*"/>
<site-control permitted-cross-domain-policies="master-only" />
</cross-domain-policy>
As we can see, the request is not a valid http request (amazing what adobe engineers have done!). I tried to use $request_method inside the nginx configuration file but no success yet,
View 3 Replies
Jan 15, 2010
I have a Flex frontend connecting via RemoteObject to Zend Framework's Zend Amf. This is my only means to transport data between client layer (Flex) and the application and persistence layers (LAMP with Zend Framework).Some ways I can address security are as follows:
I can address TLS by using mx.messaging.channels.SecureAMFChannel in my services-config.xml file and ensuring Flash player is loaded into a HTTPS wrapper and is in fact using HTTPS since the AMF protocol is layered on top of HTTP RemoteObject has a setCredentials method with which I can pass AMF authentication headers to protect user related data. Assuming TLS was actually secure I can expose methods on the endpoint after authenticating the User.I can protect against cross-site scripting and other FLASH vulnerabilities with a properly set up crossdomain.xml how to I protect my endpoint against another AMF consumer? For instance, if there were another AMF consumer (not Flash so not bound by crossdomain.xml and Flash sandbox security) other than my Flex client that knew my endpoint, what would stop it from using methods that the endpoint exposes?
As far as I know I essentially need a way to authenticate my Flex application against my Zend Amf endpoint. After AMF consumer authentication, I have some of the security mechanisms I mentioned above to protect certain pieces of data (like User authentication). I can not embed some sort of authentication mechanism into my Flex swf because the swf is vulnerable to decompilation (the swf can not be trusted). While sensitive data is protected via User authentication the unprotected data is hardly public but as far as I can tell is totally open for public consumption.
View 2 Replies
Aug 17, 2010
I am creating a TextField in my flash application, but when i am starting to write something the following error in written to trace:
* Security Sandbox Violation * SecurityDomain xxx tried to access incompatible context yyy
View 1 Replies
