homepage Welcome to WebmasterWorld Guest from 54.166.53.169
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member

Home / Forums Index / Code, Content, and Presentation / Flash and Shockwave
Forum Library, Charter, Moderator: open

Flash and Shockwave Forum

    
Cross-Site Scripting to Embedding Page
Filipe

10+ Year Member



 
Msg#: 4103294 posted 8:01 pm on Mar 23, 2010 (gmt 0)

Here is my situation:

I have a Flash file hosted at:

static.mydomain.com/flash.swf

I have a web page that embeds that Flash file at:

www.mydomain.com/embed.html

The <embed> code for that SWF has the "allowScriptAccess" parameter set to "sameDomain". Currently, I cannot put links in "flash.swf" that change the location of the embedding page, because they are on different domains, and making a getURL() or ExternalInterface call won't be permissible.

Changing "allowScriptAccess" to "always" is not an option. Putting both files on the same domain is also not an option.

Policy files don't seem to be the solution (perhaps I'm coding them wrong?) and changing the "document.domain" of the embedding page doesn't seem to work either.

Has anyone else run into this issue and found a solution work for them?

 

Filipe

10+ Year Member



 
Msg#: 4103294 posted 6:49 pm on Apr 6, 2010 (gmt 0)

Nobody?

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Code, Content, and Presentation / Flash and Shockwave
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved