I have been looking at the flash player9 security whitepaper as well, and I
think doing some changes on *flash.system.Security.sandboxType* may help me.
But this property is read-only and I coulnT find anything how to set it.
According to [1], talking about *FlashPlayerTrust configuration file*. Do
you have any idea where can I get this file or change the property that I
said.
Thanks.*

*[1] -
http://www.adobe.com/livedocs/flash/9.0/ActionScriptLangRefV3/flash/system/Security.html#LOCAL_TRUSTED

2010/3/3 P T Withington <[email protected]>
>
> I am hardly the expert here, but one of the primary differences between
solo and proxied is that in a proxied app, the laszlo server is proxying all
requests.  This means that Flash security is not involved:  as far as it can
tell, all requests go to/from the server the application was loaded from.
>
> When you make a solo application that makes web requests, you have to get
Flash security involved, and Flash has been slowly becoming more and more
restrictive in this area.
>
> Certainly that compilation warning sounds like it may be trying to say
something along those lines.
>
> On 2010-03-03, at 16:17, cem sonmez wrote:
>
> > it seems that nobody had an experience on a laszlo application that is
> > working with a server application on swf10 env.
> > The thing that I donT undestand that how the application works properly
on
> > developer console, but doesnT work for swf10 object that is generated by
the
> > solo deploy option of developer console.
> > Please someone show me any way to work out this problem.
> > I am stuck here for 3 days.
> > Thanks
> >
> > 2010/3/3 cem sonmez <[email protected]>
> >
> >> when using proxied=false, there is a compication warning :
> >> *The tag 'connection' will not work as expected when used in a
serverless
> >> application.*
> >> connection is the class that connection is being initialized in.
> >>
> >> Anyway, I deployed solo and after that html wrapper doesnT work. But
> >> existing problem is still goes on swf10 object.
> >> So same behaviour when using proxied="false".
> >>
> >> when i try the swf object with debug flash debug player, a popup
message
> >>
> >> Error: Error #2029: This URLStream object does not have a stream
opened.
> >> at flash.net::URLStream/close()
> >> at flash.net::URLLoader/close()
> >> at LzHTTPLoader/abort()
> >> at LzHTTPLoader/open()
> >> at LzHTTPDataProvider/doRequest()
> >> at LzDataset/doRequest()
> >> at $lzc$class_languageSelector/$
> >>>
> >>> m576()
> >>> at Function/http://adobe.com/AS3/2006/builtin::call()<
http://adobe.com/AS3/2006/builtin::call%28%29>
> >>> at LzEvent/sendEvent()
> >>> at $lzc$class_basecombobox/$m295()
> >>> at Function/http://adobe.com/AS3/2006/builtin::call()<
http://adobe.com/AS3/2006/builtin::call%28%29>
> >>> at LzEvent/sendEvent()
> >>> at $lzc$class_baselist/select()
> >>> at $lzc$class_list/select()
> >>> at $lzc$class_baselist/selectItemAt()
> >>> at $lzc$class_baselist/init()
> >>> at $lzc$class_list/init()
> >>> at $lzc$class_basefloatinglist/init()
> >>> at $lzc$class_floatinglist/init()
> >>> at LzNode/__LZcallInit()
> >>> at LzCanvas/__LZcallInit()
> >>> at LzCanvas/__LZinstantiationDone()
> >>> at LzInstantiatorService/makeSomeViews()
> >>> at LzInstantiatorService/checkQ()
> >>> at Function/http://adobe.com/AS3/2006/builtin::call()<
http://adobe.com/AS3/2006/builtin::call%28%29>
> >>> at LzEvent/sendEvent()
> >>> at LzIdleKernel$/__update()
> >>>
> >>> to work out this security problem i made something on canvas (oninit
> >>> handler). Here it is:
> >>>
> >>> <!--main application-->
> >>> <canvas width="100%" height="100%" title="Videoconference Application"
> >>> oninit="conn.connect('rtmp://localhost:1935/fi6en')"
> >>>        proxied="false">
> >>>    <!-- oninit="conn.connect('rtmp://127.0.0.1/fi6en'<
http://127.0.0.1/fi6en%27>
> >>> )"-->
> >>>    <switch>
> >>>        <when property="$as3">
> >>>            <passthrough>
> >>>            import flash.system.Security
> >>>            </passthrough>
> >>>        </when>
> >>>    </switch>
> >>>    <handler name="oninit">
> >>>        Security.allowDomain('*');
> >>>        //Security.LOCAL_TRUSTED;
> >>>        switch (Security.sandboxType) {
> >>>            case Security.LOCAL_TRUSTED :
> >>>                Debug.info('Sandbox type : Local Trusted');
> >>>                break;
> >>>            case Security.LOCAL_WITH_FILE :
> >>>                Debug.info('Sandbox type : Local with file');
> >>>                break;
> >>>            case Security.LOCAL_WITH_NETWORK :
> >>>                Debug.info('Sandbox type : Local with network');
> >>>                break;
> >>>            case Security.REMOTE :
> >>>                Debug.info('Sandbox type : Remote');
> >>>                break;
> >>>        }
> >>>    </handler>
> >>>    <dataset name="dsetLang" id="dsetLang"  src="lang/turkish.xml"/>
> >>>    <languageSelector id="langSelector" align="right" valign="top"
> >>> width="130" yoffset="-10" xoffset="10"/>
> >>>    <include href="library.lzx"/>
> >>>    <debug x="50" width="400"/>
> >>>    <connection id="conn" />
> >>>    <loginWindow name="loginScreen" align="center" valign="middle" />
> >>>    <chatView id="chatScreen" y="50" align="center" opacity="0"/>
> >>> </canvas>
> >>>
> >>> but i am getting the popup message and dont know how the solution is.
> >>
> >>
> >>
> >>
> >>
> >>> 2010/3/3 Henry Minsky <[email protected]>
> >>>>
> >>>> So does that mean that running with proxied=false causes the problem
,
> >>> but running in
> >>>> default mode (proxied=true) works? The issue could be some sort of
> >>> security permissio
> >>>
> >>>
> >>> ns thing, if Flash client is trying to make a data connection to a
host
> >>> which is
> >>>> not the same domain as the app was loaded from?
> >>>>
> >>>> On Wed, Mar 3, 2010 at 9:59 AM, cem sonmez <[email protected]>
> >>> wrote:
> >>>>>
> >>>>> used proxied="false" on canvas tag. Still the same problem. In this
> >>> case(using proxied="false"). html wrapper that is generated in solo
deploy
> >>> of developer console does not work at all. Tested by running the swf10
> >>> object.
> >>>>>
> >>>>> 2010/3/3 Henry Minsky <[email protected]>
> >>>>>>
> >>>>>> As an experiment, can you make the app work in non-proxied mode,
set
> >>> lzproxied=false explicitly in the query args, or on the canvas
> >>>>>> <canvas proxied="false">
> >>>>>> Just to make sure that is not the issue.
> >>>>>>
> >>>>>> On Wed, Mar 3, 2010 at 9:27 AM, cem sonmez <[email protected]>
> >>> wrote:
> >>>>>>>
> >>>>>>> Yes on the developer console everthing works fine.
> >>>>>>> URL looks like this : ..application.lzx?debug=true&lzr=swf10. (I
am
> >>> not setting lzproxied, whatever default value is being used)
> >>>>>>> But when I use the generated swf10 object, problem occurs. And
donT
> >>> know why this happens :(
> >>>>>>>
> >>>>>>> Think about this scenario:  two applications are running, one of
> >>> them is on the developer console, and the another one is the swf
object
> >>> that is embedded to the html. Both of them is connecting the same red5
app.
> >>> with the 'rtmp://localhost:1935/fi6en'. I can see on the red5
application
> >>> log, that both of them is connecting to the application properly. And
when
> >>> the application embedded into html, sends something to the shared
object
> >>> that has been created on the red5 side, app. on the dev. console sees
> >>> everthing with no problem, but html embedded application doesnT see
> >>> anything. And when app. on the dev. console sends someting to the
shared
> >>> object, everyhing is being shown on itself, but not on the app.
embedded
> >>> into html.
> >>>>>>>
> >>>>>>> I may explained a bit complicated, sorry for that. This is the
> >>> problem that I am having for a few days.
> >>>>>>> Thanks.
> >>>>>>>
> >>>>>>> 2010/3/3 Henry Minsky <[email protected]>:
> >>>>>>>> So the app is working properly when you run it with the dev
console
> >>> and with
> >>>>>>>> lzproxied=false?
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> On Wed, Mar 3, 2010 at 8:38 AM, cem sonmez <[email protected]>
> >>> wrote:
> >>>>>>>>>
> >>>>>>>>> So, in this case lzproxied=false option is the way that I need.
> >>> App
> >>>>>>>>> may do nothing strange right ?
> >>>>>>>>> I am really stucked here, and couldn't find the solution for 3
> >>> days. I
> >>>>>>>>> just want to deploy my app. that is working well on the
developer
> >>>>>>>>> console. I really appreciate if you show me something way to get
> >>> me
> >>>>>>>>> closer to the solution.
> >>>>>>>>> Thanks in advance.
> >>>>>>>>>
> >>>>>>>>> Cem
> >>>>>>>>>
> >>>>>>>>> 2010/3/3 Henry Minsky <[email protected]>
> >>>>>>>>>>
> >>>>>>>>>> There are two main differences between the  app in  the
> >>> developer
> >>>>>>>>>> console , and running as a SOLO app.
> >>>>>>>>>> First, the SOLO app is generally run with the lzproxied flag =
> >>> false. So
> >>>>>>>>>> data requests and media requests will be fetched directly
rather
> >>> than
> >>>>>>>>>> proxied via the server.
> >>>>>>>>>> Second, the wrapper HTML page is different, so that might be an
> >>> issue of
> >>>>>>>>>> how the swf app is being embedded using an <object> tag.
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> On Wed, Mar 3, 2010 at 8:08 AM, cem sonmez <
> >>> [email protected]> wrote:
> >>>>>>>>>>>
> >>>>>>>>>>> Hi
> >>>>>>>>>>> My laszlo application works with a red5 server application on
> >>>>>>>>>>> localhost.
> >>>>>>>>>>> Everything works as expected, when I run the application on
the
> >>>>>>>>>>> developer console compile option.
> >>>>>>>>>>> Then generating the solo deploy directory.
> >>>>>>>>>>> I donT know why application that is working well during the
> >>> developer
> >>>>>>>>>>> console compilation, causing problem while running the swf10
> >>> object (e.g.
> >>>>>>>>>>> about shared objects ).
> >>>>>>>>>>>
> >>>>>>>>>>> --
> >>>>>>>>>>> Cem SONMEZ
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> --
> >>>>>>>>>> Henry Minsky
> >>>>>>>>>> Software Architect
> >>>>>>>>>> [email protected]
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> --
> >>>>>>>>> Cem SONMEZ
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> --
> >>>>>>>> Henry Minsky
> >>>>>>>> Software Architect
> >>>>>>>> [email protected]
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>> --
> >>>>>>> Cem SONMEZ
> >>>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>> --
> >>>>>> Henry Minsky
> >>>>>> Software Architect
> >>>>>> [email protected]
> >>>>>>
> >>>>>>
> >>>>>
> >>>>>
> >>>>>
> >>>>> --
> >>>>> Cem SONMEZ
> >>>>
> >>>>
> >>>>
> >>>> --
> >>>> Henry Minsky
> >>>> Software Architect
> >>>> [email protected]
> >>>>
> >>>>
> >>>
> >>>
> >>>
> >>> --
> >>> Cem SONMEZ
> >>>
> >>
> >>
> >>
> >> --
> >> Cem SONMEZ
> >>
> >
> >
> >
> > --
> > Cem SONMEZ
>



--
Cem SONMEZ

Reply via email to