This will not get around whitelist security, since the source specifies something in the SWF while whitelist security is done on the server side . We have done testing of whitelist security without using a SWF (that is, direct HTTP calls to the proxy/remoting piece, as someone with bad intentions would do) so anything you can think of to put in a SWF isn't going to affect whitelist security. -Brian
-----Original Message----- From: [email protected] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Barnes Sent: Wednesday, May 18, 2005 1:22 AM To: [email protected] Subject: Re: [flexcoders] RemoteObject source="" bug? Robin Hilliard asked a nice question regarding this last night, in that will this get around whitelist security? or is it stored elsewhere and acts as a filter before allowing remote calls to be made? On 5/18/05, Matt Chotin <[EMAIL PROTECTED]> wrote: > > > > Yeah, RemoteObject requires the classname to be set at compile-time in the > tag, no binding allowed. That's a bug that it didn't raise a compiler > error. In 2.0 we're trying to allow a lot more runtime tweaking of all of > our services including RemoteObject to allow things like this. > > > > Matt > > > > ________________________________ > > > From: [email protected] [mailto:[EMAIL PROTECTED] On > Behalf Of Scott Barnes > Sent: Monday, May 16, 2005 10:50 PM > To: [email protected] > Subject: [flexcoders] RemoteObject source="" bug? > > > > > Indy @ Straker noticed today that you can't use > source="{binding.to.a.obj.value}" in mx:RemoteObject? > > In that it appears it ignores the fact that the curly braces are there > and simply takes it as string value .. > > ie: > call "{binding.to.a.obj.value}.doMethod()" is the invocation attempt via > Debug. > > I did find a a work-around in that you could do: > > function initRemoteObjectService() { > > // tricks the flex compiler. > serviceID['__serviceName'] = binding.to.a.obj.value; > > } > > but seems dodge ? is it a bug or was that meant to be the case in > terms of assigning dynamic values to the source attribute. > > > -- > Regards, > Scott Barnes > http://www.mossyblog.com > http://www.flexcoder.com (Coming Soon) > > > ________________________________ > Yahoo! Groups Links > > > To visit your group on the web, go to: > http://groups.yahoo.com/group/flexcoders/ > > To unsubscribe from this group, send an email to: > [EMAIL PROTECTED] > > Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service. -- Regards, Scott Barnes http://www.mossyblog.com http://www.flexcoder.com (Coming Soon) Yahoo! Groups Links Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/flexcoders/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
