It's my Security settings for the Flash player. Jason Merrill Bank of America Learning Technology Solutions
>>-----Original Message----- >>From: [EMAIL PROTECTED] [mailto:flashcoders- >>[EMAIL PROTECTED] On Behalf Of Cedric Muller >>Sent: Thursday, June 01, 2006 12:43 PM >>To: Flashcoders mailing list >>Subject: Re: [Flashcoders] Cross domain policy file issues >> >>what if you do: >>getURL("http://www.adobe.com"); >>?? >> >>Cedric >> >> >>> It fails for me when I use getURL("http://www.adobe.com", >>> "_blank"); in >>> a Flash 7 .swf file running with the Flash 7 player in Firefox or IE >>> installed on my machine. >>> >>> My HTML looks like this: >>> >>> <p> >>> <object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" >>> codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/ >>> swflas >>> h.cab#version=7,0,19,0" width="798" height="58"> >>> <param name="movie" value="menu.swf" /> >>> <param name="quality" value="high" /> >>> <embed src="menu.swf" quality="high" >>> pluginspage="http://www.macromedia.com/go/getflashplayer" >>> type="application/x-shockwave-flash" width="798" height="58"></embed> >>> </object> >>> </p> >>> >>> I get the error from the player, "This file is attempting to >>> access..."etc. >>> >>> Jason Merrill >>> Bank of America >>> Learning Technology Solutions >>> >>> >>> >>> >>> >>> >>> >>>>> -----Original Message----- >>>>> From: [EMAIL PROTECTED] [mailto:flashcoders- >>>>> [EMAIL PROTECTED] On Behalf Of bryan.rice >>>>> Sent: Thursday, June 01, 2006 12:21 PM >>>>> To: Flashcoders mailing list >>>>> Subject: Re: [Flashcoders] Cross domain policy file issues >>>>> >>>>> >>>>> On Jun 1, 2006, at 11:56 AM, Merrill, Jason wrote: >>>>> >>>>>> How do you deal with cross domain linkin issues? In the Flash 7 and >>> 8 >>>>>> security model, a cross domain policy XMl file is required to use >>>>>> getURL >>>>>> to access other domains outside the domain the .swf is on. >>>>> >>>>> >>>>> What do you mean? When is getURL failing for you? The only >>>>> security >>>>> situation with getURL is cross domain scripting attacks - like the >>>>> myspace worm - but this is resolved with the "AllowScriptAccess" >>>>> parameter/attribute in the Object/Embed tags of your html. Are you >>>>> sure that you don't have yours set to "never"? That is the only way >>>>> that getURL fails that I know of - in order to prevent malicious >>>>> swfs >>>>> from calling javascript with getURL. >>>>> >>>>> If you are trying to access a webservice that does not have a >>>>> crossdomain.xml file that will work for you, then you have to use a >>>>> proxy server to interact with the 3rd party domain and shuttle the >>>>> data back to flash. >>>>> >>>>> blue skies, >>>>> bryan >>>>> _______________________________________________ >>>>> [email protected] >>>>> To change your subscription options or search the archive: >>>>> http://chattyfig.figleaf.com/mailman/listinfo/flashcoders >>>>> >>>>> Brought to you by Fig Leaf Software >>>>> Premier Authorized Adobe Consulting and Training >>>>> http://www.figleaf.com >>>>> http://training.figleaf.com >>> _______________________________________________ >>> [email protected] >>> To change your subscription options or search the archive: >>> http://chattyfig.figleaf.com/mailman/listinfo/flashcoders >>> >>> Brought to you by Fig Leaf Software >>> Premier Authorized Adobe Consulting and Training >>> http://www.figleaf.com >>> http://training.figleaf.com >> >>_______________________________________________ >>[email protected] >>To change your subscription options or search the archive: >>http://chattyfig.figleaf.com/mailman/listinfo/flashcoders >> >>Brought to you by Fig Leaf Software >>Premier Authorized Adobe Consulting and Training >>http://www.figleaf.com >>http://training.figleaf.com _______________________________________________ [email protected] To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com

