Yes, that was a Flash player security issue. I haven't examined this in DHTML.
On 9/4/07, Raju Bitter <[EMAIL PROTECTED]> wrote: > Hey Tibor, > > Another Hungarian coding LZX. :) > > I remember that the problem with https and Flash was IE specific, wasn't it? > > > Loading XML files in Flash over an SSL Connection in Internet Explorer fails > > if the Pragma:no-cache or Cache-control:no-cache HTTP headers are set on the > > XML file. > http://www.blog.lessrain.com/?p=276 > > There are some posts in the forum as well: > http://forum.openlaszlo.org/showthread.php?t=5891&highlight=https+internet+e > xplorer > > I hope that helps. > > Best, > Raju > > > > Von: Henry Minsky <[EMAIL PROTECTED]> > > Datum: Tue, 4 Sep 2007 17:22:37 -0400 > > An: Magyar Tibor <[EMAIL PROTECTED]> > > Cc: <[email protected]> > > Betreff: Re: [Laszlo-user] Https in laszlo > > > > We have seen an issue that if you load an app over regular > > (non-secure) HTTP, and then > > try to make a secure data request over HTTPS, that the newer Flash > > players will refuse to fetch the data. I think this is a new security > > policy from Macromedia. If you read their documentation, they refer to > > some workarounds for this, but always as "legacy" or "Flash 6 > > compatibility", so I think they have phased out this behavior, as it > > is a potential security hole. > > > > On 8/22/07, Magyar Tibor <[EMAIL PROTECTED]> wrote: > >> > >> Hi all! > >> > >> I have a simple app ( below ), I call a php file to write a log file on the > >> server. It works fine, when I use http. But when I try to use https, > >> nothing > >> happens. > >> I put a crossdomain.xml to the root of the server but it didn't work. > >> System.security.loadPolicyFile script also placed in the code. > >> Can anyone help let me know what's the problem? > >> > >> Thanks a lot! > >> > >> My app: > >> > >> <canvas> > >> <script> > >> > >> System.security.loadPolicyFile("https://mydomain/crossdomain.xml";); > >> </script> > >> <dataset name="dsTestHttps" secure="true"/> > >> <view id="win" layout="axis:y;spacing:2"> > >> <method name="testcall"> > >> // set URL for testing > >> var testURL = 'https://mydomain/sm/logger.php' > >> // do request > >> dsTestHttps.setAttribute( 'src', testURL ); > >> dsTestHttps.doRequest(); > >> </method> > >> <button onclick="parent.testcall()">call logger</button> > >> </view> > >> </canvas> > >> > >> > >> > >> > >> _____________________________________________________________________________ > >> _________ > >> Belevaló ajánlatok iskolakezdéshez! Vásároljon tankönyvet, számológépet, > >> írószert sorban állás nélkül! [origo] vásárlás > > > > > > -- > > Henry Minsky > > Software Architect > > [EMAIL PROTECTED] > > > > > -- Henry Minsky Software Architect [EMAIL PROTECTED]
