homepage Welcome to WebmasterWorld Guest from 54.211.213.10
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member
Visit PubCon.com
Home / Forums Index / Code, Content, and Presentation / Flash and Shockwave
Forum Library, Charter, Moderator: open

Flash and Shockwave Forum

    
Cross-Site Scripting to Embedding Page
Filipe




msg:4103296
 8:01 pm on Mar 23, 2010 (gmt 0)

Here is my situation:

I have a Flash file hosted at:

static.mydomain.com/flash.swf

I have a web page that embeds that Flash file at:

www.mydomain.com/embed.html

The <embed> code for that SWF has the "allowScriptAccess" parameter set to "sameDomain". Currently, I cannot put links in "flash.swf" that change the location of the embedding page, because they are on different domains, and making a getURL() or ExternalInterface call won't be permissible.

Changing "allowScriptAccess" to "always" is not an option. Putting both files on the same domain is also not an option.

Policy files don't seem to be the solution (perhaps I'm coding them wrong?) and changing the "document.domain" of the embedding page doesn't seem to work either.

Has anyone else run into this issue and found a solution work for them?

 

Filipe




msg:4110941
 6:49 pm on Apr 6, 2010 (gmt 0)

Nobody?

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Code, Content, and Presentation / Flash and Shockwave
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved