Security :: Stop Http Resource Be Accessed By Flash?
Jan 22, 2012
I have some audio streaming resources on my HTTP server, let's sayI did design a flash player for playing it.Their player will try to reload that resource until it's available.This makes a lots of stress to my HTTP server. To stop them from hamming my server, I want to allow access only from my flash player. Strangely, I think in this case, flash player should check the crossdomain.xml first before load my audio resource, but they didn't. They just load the sound and play. The corssdomain.xml is not even there. I try to add one, it doesn't work as well
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM
"http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
[code].....
View 2 Replies
Similar Posts:
Jul 31, 2010
I tried to deploy my otherwise working flex app on a web server (tomcat 6).It threw a Channel.Security.Error.After some research, I became aware that flash movie loaded from flash_movie_domain will not be able to load resource from any other domain.Some suggested adding a crossdomain.xml.However, the crossdomain.xml route doesn't quite make sense.In this case, I am loading resources from a third party web site.My understanding is that I need this third party website to include a crossdomain.xml on their root directory in order for app to function.The third party web service is provided as is. I will not be able to change what's given. Since the third party is providing public access, it already explicitly give permission to the general public. Adding a crossdomain.xml to their root seems to be a redundant act?
View 1 Replies
Jul 1, 2009
I'm writing a flex application that polls an xml file on the server to check for updated data every few seconds, and I'm having trouble preventing it from caching the data and failing to respond to it being updated.
I've attempted to set headers using the IIS control panel to use the following, without any luck:
CacheControl: no-cache
Pragma: no-cache
I've also attempted adding a random HTTP GET parameter to the end of the request URL, but that seems like it's stripped off by the HttpService class before the request is made. Here's the code to implement it:
http.url = "test.xml?time=" + new Date().getMilliseconds();
And here's the debug log that makes me think it failed:
(mx.messaging.messages::HTTPRequestMessage)#0
body = (Object)#1
clientId = (null)
[Code].....
View 2 Replies
Jan 24, 2011
My swf is being served via http protocol. I don't really see this being easily changed. There's a resource that a website has opened up via their api that I need to access but it is using https protocol. Because of this my swf can't access the resource because of security settings.
Option 1 would be to serve my swf via https. I can't do this at the moment.
Option 2 would be set secure="false" property of the cross domain policy file. I can't do this, I dont have access.
View 1 Replies
Jul 13, 2010
i'm trying to integrate with a plain http service which has both http/https flavors available for consumption. sadly they never thought of a flash client consuming these services and it will take another 6 months to roll a crossdomain xml policy file on their service (there security team has to approve the process, pm team has to include it in their roadmap and blah blah). i've already implemented the flash client which works fine from a flash ide security sandbox. is it possible to get around this crossdomain policy requirement.
my flash file will always be hosted as [URL] and i will be communicating with [URL]. i'm saying [URL] because they do some loadbalancing at the backend and allocate random servers on connection (which is fine from their server side design perspective). I tried putting following two lines in the constructor of my movie clip, but couldn't pass through the security sandbox error:
View 2 Replies
Nov 13, 2010
there is an issue i am curious about very much. when i develop a flash application or web site, http posts and requests, links etc.. everything can be seen with add ons. what do you suggest for this issue? i cannot find any good solution, what solutions to be used generally?
View 13 Replies
Dec 8, 2010
Is there a way to set up Http headers to Security.loadPolicyFile() function ??
Other question: Is there any danger when loading an external swf?
View 1 Replies
Dec 5, 2010
I'm writing an application, Flex front-end & Grails back-end, in which I need to integrate security. All the information around Grails gives me the impression to be well suited for when your client is written in HTML but how can I use Flex's HTTPService to integrate into it?
View 2 Replies
Apr 1, 2011
I am creating a vertical shooter game for one of my assessments. There are 4 levels in the game, the object of each level is to shoot as many enemies (spawn via an external as file) to build up your score before the time runs out. Once the time reaches zero, you get linked to the next level. The first level is called the graveyard which has skulls as enemies. Once the time reaches zero, this swf automatically links to the next level which is called haunted_house.swf. The only problem is the skulls from the first level continue to spawn on the new level. How do I stop this? The coding for the timer and to link the first level to the next is below:
[CODE]...
View 2 Replies
Jan 20, 2011
I've created an application that includes a number of Modules and uses Parsley framework. Ant is used to build the application.Recently I thought of using Resource Bundles and implemented it in the system by creating a locale/en_US folder under the src. I added a portal.properties file with all my strings defined.In my modules, I added the metadata
<fx:Metadata>
[ResourceBundle("portal")]
</fx:Metadata>
In the ant build file, I added the below lines within mxmlc.
<locale>@{locale}</locale>
<source-path path-element="${myapp.flex.app.locale}/{locale}"/>
<include-resource-bundles>portal</include-resource-bundles>
The build works fine and when I deploy the application and open it in my browser, I'm greeted with many errors thrown by the Flash player.But if I dismiss the messages, its working fine. My strings are replaced with the values in the property file, but how do I stop the runtime errors being thrown up?I get the below error.
Error: Unable to load resource module from portal at MethodInfo-637()at flash.events::EventDispatcher/dispatchEventFunction()
at flash.events::EventDispatcher/dispatchEvent()[code].....
View 1 Replies
Oct 10, 2011
I want to stop flash player security panel to appear every time in my video recorder. I apply allow and remember but still popup appears. How I can stop this popup if once user chooses allow and remember?
View 0 Replies
Jan 22, 2010
I try to use Security.loadPolicyFile() and Flash Player goes on error because my firewall stop it. It's ok.
But, when I put the method into the Try{} Catch{} statement, I can not intercept the error.
[Code]...
View 1 Replies
Feb 19, 2011
So I want to read http streams using flash tcp sockets. I do not really need the http header at all - all I need is body which contains flv. so how to read http response body into byte array using flash sockets?
View 1 Replies
Nov 8, 2010
I am getting the xml data in my flash envronment by Test Movie. But when uploaded it does not displays the data. Note that here I have not loading a physical file with .xml extension rather i am loading a url reference which creats an xml structure for this flash object to use.
The code is given below:
var xmlLoader:URLLoader = new URLLoader();
xmlLoader.addEventListener(Event.COMPLETE, showXML);
xmlLoader.load(new URLRequest("http://www.warraq.cc/Core/waraq/quiz-
[Code].....
It loads the data during Testing the swf but fails when accessed via the link above.
View 2 Replies
Nov 28, 2010
I'm creating a banner that is supposed to send an user to a Web site. I have the following as my AS3 code (in a separate layer)[code]...
How do I get to this "settings manager"? I'm using Windows 7 Professional.
View 1 Replies
Oct 17, 2003
I have a html page that has a link, which links to another html page with a flash file on. What I need is when this flash page is accessed I need a new movie to load, which would usually load from the navigation when someone clicks on a button. Is there anyway to link to a page which then loads a new movie into the main movie. can this be done???
View 10 Replies
Apr 29, 2009
My SWF resides on domain A, is loaded by a web site on domain B and is trying to ping URL (URLLoader.load) on domain C. But I am getting "#2048: Security sandbox violation" .. why? Of course I have read the manual, I saw the security white paper but I do not understand it. Don't you know any blog or such where it is explained for dummies? With lots of examples and maybe a table showing what is allowed and what is not?
View 2 Replies
Nov 9, 2010
I am developing an isometric rpg engine in flash AS3. I have decided to separate the engine code completely from the game data, which is in xml. So I have all the maps in xml files, all the quests and npcs etc. My question is when to parse the xml into actual Actionscript code. Should I do this at the start of every play session? Should I only parse the maps as they are called? This is like start up code. For example, I want to parse every tile into a tile object, then draw it to the map. Also, I want to parse the quests in the xml into quest objects so that they can be accessed by other code. So, when should I do this??
View 2 Replies
Dec 10, 2011
I haven't been here for a while but as a resource of excellent ideas I am back to ask something that I feel you guys would know about.I am a teacher thinking of going self employed and I want to set up an online business charging for access to resources I create myself online to any students that would be interested.I can figure out how to set up password protected areas on my website where access is given when payment is made.
Of course this is for a limited period, say a week and then the password would automatically and randomly change.
I would give the password to those that had paid for access for the agreed period for access.As I aim to have more than one person at a time, this needs to be self regulating. Is this at all possible?Online teaching resource not exactly flash related!
View 3 Replies
Sep 14, 2009
Hopefully this is a straight forward question but as far as resources when compiling a flash project is flash more cpu dependent or gpu dependent? Trying to spec out a machine and need to determine what flash is going to use more.
View 1 Replies
Mar 5, 2008
I get following error: Error #2044: Unhandled securityError:. text=Error #2048: Security sandbox violation: [URL] cannot load data from 192.168.3.5:4854. at TicTacToe_fla::MainTimeline/TicTacToe_fla::frame1() ". I tryed to solve this problem about 3 hours, but I failed I have the file crossdomain.xml in the same folder like my .swf file on the server with this content:
[Code]...
View 7 Replies
Dec 8, 2010
I use the Open Resource Window (Command-Shift-R) a lot in Flash Builder and it saves me a lot of time. But I canīt seem to get it to work with my projects xml files. I know this has been working on previous projects ut I canīt find any settings for this.
View 1 Replies
May 19, 2009
I am getting a strange problem while I am making my release build swf.The swf is supposed to make some internal server calls and then display the data and also play it.When I make a release build swf and excute it, while making server calls it throws exceptions likeSecurityErrorHandler: [SecurityErrorEvent type="securityError" bubbles=falsecancelable=false eventPhase=2 text="Error #2170: Security sandbox violation:file:///Path to the swf/WebPlayer.swf cannot send HTTP headers to **Method Name to bring data from the server***]And after this nothing can be done as everything depends on the data from the server..I have updated my cross-domain.xml on the server to support the master-only policy file but that also didnt ..My cross-domain.xml is
<cross-domain-policy>
<site-control permitted-cross-domain-policies="master-only"/>
<allow-access-from domain="*"/>
[code]......
View 5 Replies
Apr 17, 2009
I haven't fully grasped how the flash security model works, and now I've ran into a problem. I have a base SWF that loads a game loader swf, which in turn loads the actual game.What I'm trying to do is taking a current bitmap snapshot of the running game. This works fine before the loader swf has loaded the game. When the game is loaded, I get a security violation because the game has images pulled from facebook. Is this something that can be solved on my end, or restricted by security in the game swf?
View 2 Replies
Dec 20, 2009
I'm having trouble with an AS3 AMF RemoteObject request that is hosted on App Engine. I have a crossdomain.xml file in the root of the domain, and also one at the remoting endpoint.Here are the contents of the root crossdomain.xml:
<?xml version="1.0"?>
<cross-domain-policy>
<site-control permitted-cross-domain-policies ="all"/>[code].....
Loading the swf file and testing it on my machine works just fine... I think that may have something to do with me having the debugger version of Flash Player. When I push it up to App Engine to make it public, other clients access it and get a Client.Error.MessageSend Channel.Security.Error error Error #2048 url: http:[url].......I am using Flex 4 beta, and the App Engine Python runtime. I have tried full wildcard in the crossdomain, and even accessing the data endpoint at a relative URL so as to avoid this error.
View 1 Replies
Jun 7, 2010
In a custom queue, there's a push() and a pop() function. The pop() may be called any time on an Event.COMPLETE, so does this mean that code can be running in push() and pop() simultaneously? If so, is there a way to prevent the code from being run in both functions at the same time?
View 3 Replies
Oct 4, 2007
If you create a Video object and trying to use the the BitmapData.draw() method on a DisplayObjectContainer that has the Video in it, if the video has not begun to play you will get this Security warning:[code]However, I found that by calling a phony url to init the video works great and gets around this issue. If you were to call _ns.close(); at any point, you would have the security issue again.
View 7 Replies
Jul 20, 2010
I have quite a challenge on my hands. I need to retrieve flashvars from a deeply nested child swf. I've scoured the net for days for an answer, but none seem to work. My issue here is that I can't figure out how to access the uppermost root (loader swf) from the child swf. When I say nested, I mean 5 levels deep, so it gets pretty hairy.
View 9 Replies
Jun 18, 2006
this is working, but I would really like to have the jpegs, as linked items in the library, or just in the same folder / path as the swf file,how can I change this to achieve that..I need that to get the prelaoding to work, or work the only way I know how to in the scope of things
footers = 5;
directory = "http://www.pathToImages.com/pic/";
getMe.loadMovie(directory + Math.ceil(Math.random()*footers) + ".jpg");
View 1 Replies
Jan 25, 2011
how I can make a shared object be able to be accessed by different SWFs on the same server.
View 5 Replies
