Wow, Julio, thanks for the great bug report. I was able to very
quickly find the offending code.

http://svn.apache.org/viewvc/shindig/trunk/java/gadgets/src/main/java/org/apache/shindig/gadgets/servlet/ProxyBase.java?view=markup&pathrev=981703

It's almost good enough for an interview question! :-)

Thing is, the code I linked to above has been there for a while so the
charset part is new. Why would I want a shockwave file to have a
charset makes my head itch.

Again thanks for the great report.

On Aug 14, 11:29 am, anatoly <[email protected]> wrote:
> thanks for the update
>
> On Aug 14, 4:20 pm, "Prashant (Google)" <[email protected]> wrote:
>
>
>
> > Sorry and thanks for letting us know. We're looking into this.
>
> > ~Prashant
>
> > On Aug 14, 5:26 pm, Julio Alvarez <[email protected]> wrote:
>
> > > Probably is related with this security item in flash:
>
> > >http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_c...
>
> > > "Starting with version 10,0,2, if Flash Player sees a
> > > "Content-Disposition: attachment" header while downloading a SWF file,
> > > it will ignore the SWF file rather than play it. Note that this
> > > restriction applies only to SWF files and not to other types of content,
> > >  such as images, sounds, text, or XML files, policy files, etc."
>
> > > And I found exatly the same response header in files served by Orkut's
> > > gmodule.com proxy/cache:
>
> > > Expires: Mon, 13 Sep 2010 12:19:00 GMT
> > > Cache-Control: public,max-age=2592000
> > > Content-Type: application/x-shockwave-flash; charset=UTF-8
> > > Server: GSE
> > > Via: HTTP/1.1 GWA
> > > *Content-Disposition: attachment;filename=p.txt*
> > > Transfer-Encoding: chunked
> > > Date: Sat, 14 Aug 2010 12:19:00 GMT
> > > X-Content-Type-Options: nosniff
> > > X-Frame-Options: SAMEORIGIN
> > > X-XSS-Protection: 1; mode=block
>
> > > So every Flash file cached by Orkut is broken.
>
> > > It's amazing how Orkut team throws stuff in production without test.
>
> > > 2010/8/14 anatoly <[email protected]>
>
> > > > It is broken on sandbox as well, but it worked fine when new orkut was
> > > > launched. it is broken since yesterday.
>
> > > > thanks
>
> > > > On Aug 14, 1:18 pm, anatoly <[email protected]> wrote:
> > > > > BTW, it is broken for all browsers, big apps depending on flash like
> > > > > BuddyPoke are currently broken.
> > > > > Can some1 look into this?
>
> > > > > On Aug 14, 1:09 pm, anatoly <[email protected]> wrote:
>
> > > > > > same here
>
> > > > > > this is critical, can you guys check it out?
>
> > > > > > On Aug 14, 6:59 am, Julio Alvarez <[email protected]> wrote:
>
> > > > > > > Orkut team,
>
> > > > > > > The new version rolled out in production has a problem.
>
> > > > > > > gadgets.io.getProxyUrl()  doesn't work for SWF files in Internet
> > > > Explorer. I
> > > > > > > removed getProxyUrl for SWF in my app and now it is working. Did 
> > > > > > > you
> > > > change
> > > > > > > something in cache for this release?
>
> > > > > > > Julio- Hide quoted text -
>
> > > > > > - Show quoted text -- Hide quoted text -
>
> > > > > - Show quoted text -
>
> > > > --
> > > > You received this message because you are subscribed to the Google 
> > > > Groups
> > > > "orkut Developer Forum" group.
> > > > To post to this group, send email to [email protected].
> > > > To unsubscribe from this group, send email to
> > > > [email protected]<opensocial-orkut%2Bunsubscrib
> > > >  [email protected]>
> > > > .
> > > > For more options, visit this group at
> > > >http://groups.google.com/group/opensocial-orkut?hl=en.-Hide quoted text -
>
> > - Show quoted text -

-- 
You received this message because you are subscribed to the Google Groups 
"orkut Developer Forum" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/opensocial-orkut?hl=en.

Reply via email to