Risk of Flex application being decompiled

Hi there,
I want do develop a Flex application. How is the risk the
application can be decompiled by my clients? Of course, I want to
avoid that ... Perhaps there's a compiler option to exclude the
source from the swf? And even if so, can the sourcecode of my
application still be drawn from the published swf files somehow?
Does all this change when I deploy my application to the
desktop using AIR?
Thanks,
Andreas

It can be done.
Do not compile sensitive data into the swf.
Other than that, source code is just source code. There are
easier ways to find out how to do something than to decompile a
swf.
Tracy

Similar Messages

How to ensure that latest version of Flex application is loaded

Hello experts
I have a bit of dilemma here. I am working on application which is going to be used at various locations (globally).
Level of technical knowledge of users varies quite a lot so do operating systems authorizations of the PCs they are working on (various companies with different level of security).
At the moment I am facing issue where some users are still using older release of the Flex application even after refresh and deletion of temporary internet files.
Is there any way to ensure (using some AS code or Flex project settings) that only latest versions of SWF files are loaded (not the one from buffer/cache)?
Regards
Michael

BTW, I have added following line to the HTML template/wrapper:
<META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE">
but it is still picking up older version of SWF file on certain PCs. It does read latest HTML (wrapper) file though. Seems that caching is only enabled for either certain file types or files exceeding certain size.
I have decided to do something a bit daft (or cheeky, depends how you look at it) as temporary solution and rename 2 main files (main SWF and HTML) to something like:
Application_name_ver_XYZ.*
It can be done in couple of minutes after release build has been exported (no need to update project itself). That way I can fool browser so it will pick up latest version (since its different file with different name).
Main application consists of 10+ modules and some of them are compiled into separate SWF files. I am loading them inside application using ModuleLoader component. I have set parameter cachePolicy to "off" as I am not going to rename all these modules each time I am releasing new version of application.
The end result is that main application is refreshed but all modules that are being loaded are picked up from cache (old versions).
So as a last resort I have decided to change folder name of my application. That way all the files (main app and modules) are considered as new files since location of all of them has changed. It is just a workaround, it does work but it carries certain risks. If user will use old link application will still load (older version) and then consequences can be catastrophic (even corruption of data).
Has anyone experienced same issues?
I know these are more browser/network issues but how do I deal with them. Some of these people cant ask IT for support (for various reasons). Is there anything else I can do to ensure that users across the board will use latest version of application?
Regards
Michael

Flex application running under AIR takes a long, long time to start.

I have a flex application which runs on a desktop under AIR. The application has an assets folder with 3,500 mp3 soundclips totalling about 50MB. The problem is, the application takes around 90 seconds to load. I'm sure that AIR is scanning the application folder and doing something with the contents because if I delete the assets folder it loads in about 5 seconds. Does anyone know why AIR/Flex would do this, and why it doesn't exhibit the same problem if I run or debug in Flexbuilder on eclipse? It's making my killer app unusable!
Thanks
Paulo

Well, I've spent a bit longer looking at this now, and the problem appears to lie with my encrypted local store. The first thing that happens is for the app to read the product key from the ELS. But, it fails (for some unknown reason). So, the app seems to hang there for 90 seconds until it eventually renders the welcome screen. If I remove the assets folder it still fails to read from the ELS, but only takes a couple of seconds to start the welcome screen. This is where the scanning of the application folder seems to come into play, because if I remove the code which reads from the ELS the app starts within 2 seconds whether the asset folder is there or not.
I think the slow startup and the scanning of the assets folder are just symptoms of a different problem, i.e. a problem with the ELS. I don't have the same problem with my development environment though - it's only when I test deploy the application.
Thanks for your help on this problem EgorKDie. I think I should be able to resolve it once I can sort out why the ELS is being awkward.

Flex Application does not work outside of the default dir

Hi,
I have developed a flex application which calls a http
service and displays the contents in a text area.
This works fine when I execute it from the flex builder or
from the directory where the flex builder stores it.
If I copy the files to any other dir or the server, after
making http call no result is displayed in the text area.
Is there any thing else i need to do other building
application in flex builder for deployment.
Please help,
Thanks in advance,
Chintan

"rtalton" <[email protected]> wrote in
message
news:gjlmvm$hrv$[email protected]..
> Stubborn, aren't we? Ok, let me try again:
> You only use "loadPolicyFile" to load a non-default
policy file. remove
> that
> line from your code.
> Also you do not need this line:
> flash.system.Security.allowDomain("*");
> ...in your code. Remove it. This is used when you have
two SWFs on two
> different servers. You do not.
>
> Again, read this page:
>
>
http://livedocs.adobe.com/flex/3/html/help.html?content=deployingoverview_12.htm
> l
>
> Your answer is there.
> Hint: all you need is to *properly* deploy a
cross-domain policy file.
> Really.
> I'm being very honest here. Have I ever lied to you
before? No, I haven't.
> So
> you're buying the first round tonight after work, ok?
Some people will do anything for a date ;-)

Embedding Fonts in a Flex application -- Legal issues?

I am currently building a Flex application for a Client. The Style guide they have provided shows Univers 55, Univers 65, and Univers 45 as the main fonts for the site and the app.
Page 1567 of Using Flex 4.5 states
Note:
Check your font licenses before embedding any font files in your applications. Fonts might have licensing restrictions that preclude them from being stored as vector information.
The fonts they are using in the AI file for the design document appear to be older version Adobe 1.0 TrueType fonts dated 30th June 1997.
I can not find the original license for these fonts, but such licenses may pre-date embedding technology, so are we allowed to embed them?
As an alternative could we safely use the OTF Univers LT Std family and are there any differences?
Message was edited by: lingoguru

As far as i see it, it's mainly just for convenience.
Embedding an image into application removes the need for you to store it elsewhere on the server, as it becomes part of the .swf file.
From personal experience it's very handy with small images, as it doesn't increase the size of the .swf file too much, and it means you don't have to keep track of them when distributing your release build.
you don't have to embed anything, you can simply reference it by location instead, but you'll experience a slight delay as it's loaded into the application on request.
The need for using this feature depends entirely on what you're trying to accomplish.
If you're making something like a large image gallery, it'll completely remove the need for wait for pictures to load when you're scrolling through them. However i wouldn't recommend it as you'll send your application size will go through the roof, and the waiting time for the whole application to load would be fairly extensive.
If you have an application with like 40 small ~3kb images using for navigation icons or something, you might as well, it's just convenient and won't impact the loading time by too much.

Publishing my flex application in external server (Channel.Security.Error error Error #2048)

when i publish my flex application in an external server i get that error if my flash builder beta 2 is closed in my system , i did configure an endpoint to the dataservice to point to the external server and if i run my flash builder and any body browser the site it open and they can access the data from my application but if i close my flash builder we have this error all of us
Send failed
Channel.Security.Error error Error #2048: Security sandbox violation:
http://www.dcecrak.com/Maine.swf cannot load data from
http://localhost:37813/flex2gateway/?hostport=www.dcecrak.com&https=N&id=-1. url:
'http://www.dcecrak.com/flex2gateway/'
i created a crossdomain.xml file and put it in the web root , if i try to open the link http://www.dcecrak.com/flex2gateway it open with blank page this means that every thing is oky , my service-config file looks like that :
<?xml version="1.0" encoding="UTF-8"?>
<services-config>
    <services>
        <service-include file-path="remoting-config.xml" />
        <service-include file-path="proxy-config.xml" />
        <service-include file-path="messaging-config.xml" />
    </services>
    <security>
        <login-command class="flex.messaging.security.JRunLoginCommand" server="JRun"/>
        
        
    </security>
    <channels>
        
<channel-definition id="dcecrak" class="mx.messaging.channels.AMFChannel">
            <endpoint uri="http://www.dcecrak.com/flex2gateway/" class="coldfusion.flash.messaging.CFAMFEndPoint"/>
            <properties>
                  <add-no-cache-headers>false</add-no-cache-headers>
                        <polling-interval-seconds>8</polling-interval-seconds>
                        <serialization>
                              <enable-small-messages>false</enable-small-messages>
                        </serialization>
                        <coldfusion>
                            
                              <access>
                                    
                                    <use-mappings>true</use-mappings>
                                    
                                    <method-access-level>remote</method-access-level>
                              </access>
                              
                              <use-accessors>true</use-accessors>
                              
                              <use-structs>false</use-structs>
                    <property-case>
                        
                        <force-cfc-lowercase>false</force-cfc-lowercase>
                        
                        <force-query-lowercase>false</force-query-lowercase>
                        
                        <force-struct-lowercase>false</force-struct-lowercase>
                    </property-case>
                        </coldfusion>
            </properties>
        </channel-definition>
        <channel-definition id="cf-polling-amf" class="mx.messaging.channels.AMFChannel">
            <endpoint uri="http://{server.name}:{server.port}{context.root}/flex2gateway/cfamfpolling" class="coldfusion.flash.messaging.CFAMFEndPoint"/>
            <properties>
                <polling-enabled>true</polling-enabled>
                <polling-interval-seconds>8</polling-interval-seconds>
                        <serialization>
                              <enable-small-messages>false</enable-small-messages>
                        </serialization>
                        <coldfusion>
                            
                              <access>
                                    
                                    <use-mappings>true</use-mappings>
                                    
                                    <method-access-level>remote</method-access-level>
                              </access>
                              
                              <use-accessors>true</use-accessors>
                              
                              <use-structs>false</use-structs>
                    <property-case>
                        
                        <force-cfc-lowercase>false</force-cfc-lowercase>
                        
                        <force-query-lowercase>false</force-query-lowercase>
                        
                        <force-struct-lowercase>false</force-struct-lowercase>
                    </property-case>
                        </coldfusion>
            </properties>
        </channel-definition>
        <channel-definition id="my-cfamf-secure" class="mx.messaging.channels.SecureAMFChannel">
            <endpoint uri="https://{server.name}:{server.port}{context.root}/flex2gateway/cfamfsecure" class="coldfusion.flash.messaging.SecureCFAMFEndPoint"/>
            <properties>
                <polling-enabled>false</polling-enabled>
                        <add-no-cache-headers>false</add-no-cache-headers>
                        <serialization>
                              <enable-small-messages>false</enable-small-messages>
                        </serialization>
                        <coldfusion>
                            
                              <access>
                                    
                                    <use-mappings>true</use-mappings>
                                    
                                    <method-access-level>remote</method-access-level>
                              </access>
                              
                              <use-accessors>true</use-accessors>
                              
                              <use-structs>false</use-structs>
                              <property-case>
                        
                        <force-cfc-lowercase>false</force-cfc-lowercase>
                        
                        <force-query-lowercase>false</force-query-lowercase>
                        
                        <force-struct-lowercase>false</force-struct-lowercase>
                    </property-case>
                        </coldfusion>
            </properties>
        </channel-definition>
        
        <channel-definition id="java-amf" class="mx.messaging.channels.AMFChannel">
            <endpoint uri="http://{server.name}:{server.port}{context.root}/flex2gateway/amf" class="flex.messaging.endpoints.AMFEndpoint"/>
        </channel-definition>
        <channel-definition id="java-secure-amf" class="mx.messaging.channels.SecureAMFChannel">
            <endpoint uri="https://{server.name}:{server.port}{context.root}/flex2gateway/amfsecure" class="flex.messaging.endpoints.SecureAMFEndpoint"/>
        </channel-definition>
        <channel-definition id="java-polling-amf" class="mx.messaging.channels.AMFChannel">
            <endpoint uri="http://{server.name}:{server.port}{context.root}/flex2gateway/amfpolling" class="flex.messaging.endpoints.AMFEndpoint"/>
            <properties>
                <polling-enabled>true</polling-enabled>
                <polling-interval-seconds>8</polling-interval-seconds>
            </properties>
        </channel-definition>
        
    </channels>
    <logging>
        <target class="flex.messaging.log.ConsoleTarget" level="Error">
            <properties>
                <prefix>[BlazeDS] </prefix>
                <includeDate>false</includeDate>
                <includeTime>false</includeTime>
                <includeLevel>false</includeLevel>
                <includeCategory>false</includeCategory>
            </properties>
            <filters>
                <pattern>Endpoint.*</pattern>
                <pattern>Service.*</pattern>
                <pattern>Configuration</pattern>
                <pattern>Message.*</pattern>
            </filters>
        </target>
    </logging>
    <system>
        <manageable>false</manageable>
        
    </system>
</services-config>
and my crossdomain.xml looks like that :
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-access-from domain="localhost" to-ports="*" secure="false"/>
<allow-access-from domain="*" to-ports="*" secure="false"/>
<allow-http-request-headers-from domain="*"/>
</cross-domain-policy>
really its strange only the site works if my flash builder is running , please help

Thanks all for your attention, i have solved my problem and i think its a bug in the flash builder , the problem was that when you compile the application and you enabling Network Monitoring , the communication of the AMF channels done throw the http://localhost:37813/flex2gateway/
and that was the problem if you close the flash builder on your system that getaway dose not exist and on the hosted server there is no such address localhost by this port also so the client application witch is catch in you system try to access your localhost and that cause a security error and the address is also not exist .
so the solution or we have to compile the project after we disable the Network Monitoring in flash builder .

Protecting swf files from being decompiled

At the end of the day, our flex apps are deployed as swf
files which have the potential to be decomplied and thereby our
intellectual properties lost. There are tools in the market which
claim to secure the swf files from being decompiled. Are these
tools live up to their claims? Is it worthwhile to spend money on
these tools? Would the protected swf become harder to deployed? Any
good products already available in this line? Please point out
some. Thx.

Most of the tools I have seen are geared towards extracting
resources from swf's. I use one myself (eltima.com) for
"harvesting" manufacturers content for my motorcycle dealers. They
are authorized to use this content, but finding someone at Yamaha
of Kawasaki or any of the majors who even knows where to find these
resources is next to impossible. I have also used it to learn from
by viewing scripts, but as you say, at the end of the day, I think
the concepts and best practices are about the only thing worth
taking away from others efforts, not the code.
Unlocking a protected file can be done as well and I remember
using a product over a year ago to get at the scripts within an swf
(I wanted the URL's that pointed to media - it was legal for me to
do this). It ran from the command line and output the scripts.
There aren't too many of these types of programs to be found, but
they exist.
My personal opinion is that it's not worth the effort. My
java classes can be decompiled and if someone wants to go to that
trouble, more power to them. To my knowledge, there isn't anything
out there yet that is perfect for backwards engineering an swf into
an MXML file, but a competitor of FLASH Decompiler says that they
can decompile Adobe 9 PLAYER swf's. For what it's worth, I plan on
posting the majority of my code on my flexdev.org site once I get
it established.
For people who make components for sale, this could be an
issue of stolen revenue if the decompilers get sophisticated enough
to reverse engineer the swc into a usable MXML file. I would be
against anyone who stole code for this purpose, for sure.

How to open user file in Flex Application

Hi forum,
I develop flex2 application where user can browse and open
XML file: the file should be loaded to text area.
Could you, please, advice me how to browse and open user
file?
I found FileReference class but it looks that it can only
upload file to a server. I need to open the file in flex
application.
Thanks for your help.
Smoke007

The issue isn't Flex, but the Flash Player. It is too much of
a security risk to allow SWFs running in the Flash Player to open
local files. Imagine going to a web site that has a SWF banner ad -
but that banner ad opens local files and sends them to a remote
system - all of your personal and financial information transfered
without your consent.
Flex apps running in the AIR player are different - the end
user must launch them explicitly, just like any other local
program.

Flex Application Hosting issue unable to access webservice from another machine

Hi all,
I am having a flex application which is using webservice of the asp.net.When I host this application on the machine in which the webservice is present then it works fine.But when I am hosting the application on the another machine then the webservice is not being called.If any body have any idea pls suggest.
Thnx in Advance,
Shardul Singh Bartwal

You may need a crossdomain.xml file. Flex security does not allow your SWF to access data on other domains without it.
In this case even mysub.myCompany.com is considered a different domain from www.myCompany .com.
These links should help you understand:
http://livedocs.adobe.com/flex/3/html/help.html?content=data_6.html
http://livedocs.adobe.com/flex/3/html/help.html?content=deployingoverview_12.html
http://livedocs.adobe.com/flex/3/html/help.html?content=security2_03.html
http://livedocs.adobe.com/flex/3/html/help.html?content=security2_04.html
If this post answers your question or helps, please mark it as such.

Calling a FLEX application from html, using parameters

Hi guys,
I have this html:
<form name="getTracing" method="POST" action="http://syyzas400/ShipmentInquiry/ShipmentDetails.html">
          QuickTrace
<input type="text" name="TrackNbr" size="14" tabindex="1" maxlength="11">
<br>
Carrier
<select name="Carrier" tabindex="2" style="background-color: #D8E4FF; color: black;
                         font-family: Arial; font-weight: bold; font-size: 9pt; width=114">
          <option>Option1
          <option>Option2
          <option>Option3
</select>
As you can notice, there is an Input field ("TrackNbr") and a selection field ("Carrier") with three options... The user enters a Tracking Nbr.
in first field and chooses one of the three options from the second field and hits <enter>. In this moment, as you can see from "action" area, an html (part of a FLEX application) is called. The problem is that the parameters ("TrackNbr" and "Carrier") are not transmitted and I don't know how to do that.
This FLEX application accepts parameters using URL fragments technique (because could be called from another FLEX application, too)
but obviously this cannot work with the above described form.
I read about External Interface class, but everybody is talking about calling ActionScript functions, not FLEX applications. Being a newbie in this area,
I am sure I am missing something, but what?
Any help would be very appreciated, as usual...
Florin

Problem solved.
I got rid of the form tag (and "action", obviously); instead, I created a JavaScript function used for onClick event of the submit button. Inside this function, I captured the values (using getElementById method) of the input and select field and, using these values, I created the URL for my FLEX application (used with location.href property), and BAM! Everything works like a charm... I am even able to use the Back button to exit the FLEX app and return to the selection screen.
Now my question is, why does it work??? No complaints at all, just curiosity... I didn't use External Interface class, no exposed ActionScript functions prior calling frm JavaScript, no fancy stuff all sites I saw talking about...
Grizz..., I have a feeling that what you described above is a simpler and more advanced way to do about the same thing I did; am I right?
Thanks,
Florin

How to show double byte data in a Flex application

Hi
I am looking for a way to show UTF-8 formatted data in a Flex
application. I have a Java app in the backend that generates an xml
file. Some attributes in the file are encoded in UTF-8 (when data
is Japanese or Chinese...). My Flex app is showing box characters.
I have XSLT app that generates html based off this xml file. The
browser i showing the Japanese characters fine.
I am wondering what the trick is to get Flex app show this
data.
Thanks
Videoguy

It turned out to be my XP that didn't have the the right lang
sets installed. I have two PCs. On one everything showed up fine. I
was able to view arabic, chinese data from xml just fine. On the
other one, same swf didn't show them. There is MS knowledgebase
article on how to enable east asian languages etc. I didn't give it
a try. I am using other pc for my dev now.

What to look for in a web hosting company for Flex applications

Hello,
I am trying to figure out what I need to look for in a web
hosting company if I want to deploy my own Flex applications? I
don't anticipate having any special requirements other than the
ability to interact with databases and XML files. Can someone help
me figure out what the server-side requirements are?
Thanks in advance!
Matt

then almost 99.9% hosting will work.
if you want a Flexx app with compiler then oo thats different
but as you say "I don't anticipate having any special requirements
other than the ability to interact with databases and XML files"
then you can go with pretty much any hosting, as long as they have
apache, Database serve and I think thats it.

How to Call a AIR application from Flex Application

Hi,
    I have Used AIR (Desktop application) in Flex Builder to Upload a File from a local path and save it it a server path.
I need to Call this AIR(Desktop application) from my Flex Application.... i.e
I am using a link button to send a event using Script and Forward that Desktop application from Flex Screen
But it doesnot load that (Desktop application) in Screen. Only Balnk screen is loaded from path
Here is the code
AIR(Desktop application)
<?xml version="1.0" encoding="utf-8"?><mx:WindowedApplication
xmlns:mx="http://www.adobe.com/2006/mxml" layout="absolute" creationComplete="openBrowseWindow();">
<mx:HTTPService id="urlpath" showBusyCursor="true" useProxy="false" method="
POST" url="http://localhost:8080/nat/FlexAction.do?method=UrlPath"result="pathresult(event)"
fault="faultHandler(event)"
>
</mx:HTTPService>
<mx:Script>
<![CDATA[
import mx.events.FileEvent;
import mx.rpc.events.ResultEvent;
import mx.rpc.events.FaultEvent;
import mx.utils.ObjectUtil;
import mx.controls.Alert;
private
var openFile:File = new File()
private
function openBrowseWindow():void{openFile.addEventListener(Event.SELECT, onOpenFileComplete);
openFile.addEventListener(Event.OPEN, load);
openFile.browse();
private
function load():void{Alert.show(
"load");
var imageTypes:FileFilter = new FileFilter("Images (*.jpg, *.jpeg, *.gif, *.png)", "*.jpg; *.jpeg; *.gif; *.png");
//var textTypes:FileFilter = new FileFilter("Text Files (*.txt, *.rtf)", "*.txt; *.rtf");
var allTypes:Array = new Array(imageTypes);openFile.browse(allTypes);
private
function faultHandler(event:FaultEvent):void {
//Alert.show("Fault")Alert.show(ObjectUtil.toString(event.fault));
private
function pathresult(event:ResultEvent):void{Alert.show(
"res")
//Alert.show(ObjectUtil.toString(event.result));}private
function onOpenFileComplete(event:Event):void{
//mx.controls.Alert.show("event: "+event.target.nativePath +"UR!!!");
var pPath = event.target.nativePath;
var parameters:Object = {FlexActionType:"PATH",path:pPath};
// Alert.show("Image Selected from Path : "+pPath); urlpath.send(parameters);
//Alert.show("Passed.."+parameters);}
]]>
</mx:Script>
<mx:Button click="openBrowseWindow();onOpenFileComplete(event)" name="Upload" label="Upload" x="120.5" y="10"/>
Here is Mxml Code for Flex Application
<?xml version="1.0" encoding="utf-8"?><mx:Application
xmlns:mx="http://www.adobe.com/2006/mxml" layout="absolute" xmlns="http://ns.adobe.com/air/application/1.0.M4" >
<mx:Script>
<![CDATA[
import mx.controls.Alert;
private function Upload():void{
// CursorManager.setBusyCursor();
//var url:String = "HomeAction.do?method=onLoad";
//var url:String = "assets/Air.swf";
var url1:URLRequest = new URLRequest("assets/Air.swf");navigateToURL(url1,
"_self");
// CursorManager.removeBusyCursor(); }
]]>
</mx:Script>
<mx:LinkButton id="up" click="Upload()" x="295" y="215" label="UpLoad"/>
In this code i forward using s url to Open tat Desktop application but a blank screen appears with out the proper output...
Please Help me in this to forward AIR from Flex Screen..
Thanks in Advance
With Regards
Gopinath.A
Software Developer
First Internet Systems Pvt. Ltd.,
Chennai

try this
http://www.leonardofranca.com/index.php/2009/09/17/launching-an-installed-air-application- from-the-browser/
regards
Leonardo França
Adobe Certified Expert Flex 3 with AIR
Adobe Certified Expert Rich Internet Application Specialist v1.0
Adobe Certified Expert Flash CS3 Professional
Certified Professional Adobe Flex 2 Developer
Adobe Certified Professional Flash MX 2004 Developer
http://www.leonardofranca.com
http://twitter/leofederal
Manager AUGDF - Adobe User Group do Distrito Federal
http://www.augdf.com.br
http://twitter/augdf

Hi All,i am currently working on a flex application that will allow the user to change the language

Hi All,i am currently working on a flex application that will allow the user to change the language within the application from english to Japanese and vice versa. And everything works fine.
I am using flex 4.5
We allow the user to save records with english or japanese texts.
problem
When the user manually enters Japanese text and tries to save it the record defaults back to the default name (which is in english). But if you copy the entered text and paste it and then save it.It works fine.
Any idea , why this is happening?
Please let me know if the question is not clear.
Looks like there was already a bug
https://issues.apache.org/jira/browse/FLEX-28894?page=com.atlassian.jira.plugin.system.iss uetabpanels:all-tabpanel
Not sure why does it say , Resolved .
-KB
Message was edited by: bKartik.b

By Payal integration , you mean paypal button html ? or payment gateway setup etc ? If its a gateway configuration for your site domain then single page for all layout will work , but if you are using button code for all renditions then you would need to create separate pages for all.
Thanks,
Sanjit

Flex application not working when deployed run from Server

Hi,
I have Flex application which takes a parameter from user, makes a web-service call and returns the message.
This application is running perfectly when I launch from IDE.
But when I copy the files from bin-release to server and launch it, it gives me no result.
In the crossdomain file on the server which hosts web-service, I have added the my host IP in the
allow-access-from domain tag.
In the initialization method of the application I load crossdomain using following code:
    Security.allowDomain("remoteservername");
    Security.loadPolicyFile("http://remoteservername/crossdomain.xml");
    var request:URLRequest = new URLRequest("http://remoteservername/crossdomain.xml");
    var loader:URLLoader = new URLLoader();
    loader.load(request);
Is there a way I can debug application when running from server?
Please give me some pointer to solve this problem.
Thank you.
Chintan

Alex thanks for reply
The URL for the app is http://<some_IP>/flex_app
<some_IP> is added in crossdomain.
Also we have outbound IP's and of these are also added in the crossdomain file.
This is the current content of crossdomain file:
<cross-domain-policy>
<site-control permitted-cross-domain-policies="master-only"/>
<allow-access-from domain="<some_IP>"/>
<allow-access-from domain="<outbound_IP1>"/>
<allow-access-from domain="<outbound_IP2>"/>
<allow-access-from domain="<outbound_IP3>"/>
<allow-http-request-headers-from domain="<outbound_IP1>" headers="SOAPAction"/>
<allow-http-request-headers-from domain="<outbound_IP2>" headers="SOAPAction"/>
<allow-http-request-headers-from domain="<outbound_IP3>" headers="SOAPAction"/>
</cross-domain-policy>
App runs perfectly fine when launched from Flex Builder.

Risk of Flex application being decompiled

Similar Messages

Maybe you are looking for