Embed silverlight object in OA page

Question

Gurus,
I have a requirement to embed a Silverlight object in an OA page. When I use personalization to do this, the Silverlight area shows (if I rightclick there I get the Silverlight menu) but the silverlight application is not rendered. Any idea why?
I am using OAF version 11.5.10.6RUP.
When I embed a macromedia flashplayer, IT WORKS.
When I save the OA page source as a google page and open the google page, it renders the Silverlight object as well. Only when the page is opened from Oracle it doesn't render Silverlight object.
Steps to reproduce the issue:
1. Personalize any OA page to add a RawText item
2. Set the text of the item to:
<object data="data:application/x-silverlight," type="application/x-silverlight-2"
width="320"
height="320">
<param name="source" value="http://www.silverlight.net/content/samples/sl2/ruby-clock/app.xap" />
<param name="onerror" value="onSilverlightError" />
<param name="background" value="#00000000" />
<param name="initParams" value="reportErrors=errorLocation" />
<param name="windowless" value="true" />
<img src="http://go.microsoft.com/fwlink/?LinkId=108181" alt="Get Microsoft Silverlight" style="border-style: none" />
</object>
3. Open the OA page, you'll see a blank area where if you right-click you can see a "Silverlight" menu (but the application, an anlog clock in this case, is not rendered)
If I use the following macromedia flashplayer object instead, it renders:
<object type="application/x-shockwave-flash"
data="http://www.macromedia.com/shockwave/download/triggerpages/flash.swf"
width="300"
height="120">
<param name="movie" value="http://www.macromedia.com/shockwave/download/triggerpages/flash.swf" />
</object>
Appreciate any help.
Thanks,
Binish

Answer 1

I was able fix this. Just in case someone come across a similar issue, here is the fix:
Cause:
Its completely a Silverlight issue, nothing to do with Oracle. Silverlight has lots of URL access restrictions in place which doesn't allow an HTTPS page to refer to HTTP page (cross-scheme reference) or sometimes even an object to refer to any other domain etc. They have policy files that need to be set properly to enable such accesses. Apparently even when such access is enabled, sometimes these settings are overridden for added security.
Solution 1:
Copy the .xap file over to Oracle (copy to $OA_HTML) and in the "source" of object tag refer to this file
eg:
<object data="data:application/x-silverlight-2," type="application/x-silverlight-2" width="400" height="350">
     <param name="source" value="https://<ebizURL>/OA_HTML/PieCharts.xap"/>
     <param name="onerror" value="onSilverlightError" />
     <param name="background" value="white" />
     <param name="minRuntimeVersion" value="2.0.31005.0" />
     <param name="autoUpgrade" value="true" />
     <img src="http://go.microsoft.com/fwlink/?LinkId=108181" alt="Get Microsoft Silverlight" style="border-style: none"/>
</object>
Make sure the source says "https", if you give the comeplete URL. Alternatively, since the file is in Oracle server itself, you can specify relative URI as follows:
<param name="source" value="/OA_HTML/PieCharts.xap"/>
Solution 2:
Another potential solution could be to find the correct settings for the policy files used by Silverlight. This has to be set where the .xap file is hosted. I haven't tested this option since I don't have access to the server where my silverlight application is tested and the people responsible haven't tried much on this.
Hope this helps someone.
Thanks,
Binish