I am HTML developer using Strobe Media playback. Please tell me the ways to prevent strobemediaplayback.swf from XSS attacks.

Attack was reported as a vulnerability issue with Strobe Media player using the below listed URL pattern
http://<hostname>/<app_folder>/StrobeMediaPlayback.swf?src=%23\"))}finally{confirm(/vivek/)}
Any plugin or provision available with Strobe to prevent this ? Pleas suggest a workaround.
Thanks in advance for your assistance,
Vivek

Friends,
No response yet ? Please suggest me a solution at the earliest.
It's very urgent.
Thanks,
Vivek

Similar Messages

  • Any tutorial for Live RTMP Dynamic Streaming using Strobe Media Playback?

    Any tutorial for Live RTMP Dynamic Streaming using Strobe Media Playback anywhere available on the web ?

    Thank you for the link but it does not solve my problem. In this thread they work with manifest xml files like a playlist. Which i tryed but also doesn´t work. Adobe declairs FMP with easy config and less code for non geeks. And this is exactly what i want for my project.
    Does anybody can post some  html sample code especially for dynamic streaming/ MBR wit Flash Media Playback??? For Live or On-Demand.
    Best
    Hinricht

  • I am using strobe media playback but i want to add new button for subtitle in control bar,Can anybody tell me how can i do it.

    I am using strobe media playback but i am not able to add new button for subtitle in control bar.
    I have imported assets.fla file in Flash professional but i do not understand how add new button in this fla and then link with action script method to show subtitle.If anybody know about it please tell me.

    Hi,
    Yes you can add video subtitle and I can give you the details how to do
    that. Can you please advise which type of files you have for video
    subtitile and how many language you want to add. i.e. text files or xml
    files.
    Best regards,
    Sunil Kumar
    On Thu, Jan 15, 2015 at 5:22 PM, Add Subtitles to OSMF and <

  • HT4759 i have lost my iphone i dont have iemi number but i used icloud id on that as there any way to locate my phone and if not located the plz tell my the way i remove my data from it. thanks

    i have lost my iphone i dont have iemi number but i used icloud id on that as there any way to locate my phone and if not located the plz tell my the way i remove my data from it. thanks

    Go to icloud.com.  Log in with your Apple ID & Password.  Go to the Find My iPhone section.  Perform a remote wipe of the device.
    You don't have to have downloaded any app.  You only have to have enabled the Find My iPhone option under Settings > iCloud.  If you did not do that, then you cannot remotely access the device.
    If that's the case, then change ALL of your account passwords; email, banking, etc.  All of them.  And then monitor those accounts very closely!

  • Strobe Media Playback - calculating playback position from server

    Need assistance on changing the seek position of a streaming video from Wowza Media 2.23 using Strobe Media Playback.
    Have browser playback working OK but need to be able to position play derived from an array which gives a timing line value from the original video.
    It will allow a user to locate an event within a video rather than playing the whole video.
    The application is running on a Windows 2008 R2 Server using ASPNet 4.0.
    Thanks for any ideas / suggestions.

    The player supports both standard and advanced delivery methods, including progressive download, RTMP streaming,
    RTMP dynamic streaming, HTTP streaming, HTTP dynamic streaming, and live streaming. Flash Media Playback
    1.5 and Strobe Media Playback 1.5 also provide support for RTMFP multicast content delivery.
    While RTMP(x) streaming are FMS content delivery technologies, the player can also be used with other FMS compatible streaming servers, such as Wowza or Red5.
    In the case you do not need the use of FMS streaming functionality, progressive download is always an alternative (what this means is that all you need is a video that can be served by a webserver like apache, nginx, lightypd, etc).
    As for how the player can be used, these links are allways a good place to start and get a better idea of what it is all about:
    http://www.osmf.org/strobe_mediaplayback.html
    http://blog.theflashblog.com/?p=2087
    Hope this helps.

  • Strobe Media Playback error 1502

    Hi I'm using Strobe Media Playback 1.6.328.
    Randomly using Internet Explorer we get error 1502.
    Using FF and Chrome works prfect.
    Any ideas?
    Thanks in advance.
    Pablo.

    The player supports both standard and advanced delivery methods, including progressive download, RTMP streaming,
    RTMP dynamic streaming, HTTP streaming, HTTP dynamic streaming, and live streaming. Flash Media Playback
    1.5 and Strobe Media Playback 1.5 also provide support for RTMFP multicast content delivery.
    While RTMP(x) streaming are FMS content delivery technologies, the player can also be used with other FMS compatible streaming servers, such as Wowza or Red5.
    In the case you do not need the use of FMS streaming functionality, progressive download is always an alternative (what this means is that all you need is a video that can be served by a webserver like apache, nginx, lightypd, etc).
    As for how the player can be used, these links are allways a good place to start and get a better idea of what it is all about:
    http://www.osmf.org/strobe_mediaplayback.html
    http://blog.theflashblog.com/?p=2087
    Hope this helps.

  • Strobe Media Playback and streamType='dvr' not playing "live"

    Hello,
    We're currently using Strobe Media Playback to play a DVR stream.
    These are the parameter options we're passing:
    var parameterNames = pqs.params(false);
                var parameters =
                   {    src:"<?php echo $_GET['src']; ?>"               
                    ,    autoPlay: true       
                    ,    sreamType: "dvr"
                    ,    controlBarAutoHide: true   
                    ,     highQualityThreshold: "640"
                    ,    dvrSnapToLiveClockOffset: "5"
                    ,   javascriptCallbackFunction: "onJavaScriptBridgeCreated"
    The seekbar shows Live / <time>, but it always starts from the beginning of the stream. If you move the seekbar all the way to the right, It starts playing live.
    Why is it doing this? if I take out the <dvrInfo> tag in the f4m file, and set streamType: "live", it starts from the live point.
    Any input is appreciated.
    Thanks

    Hi,
    We have a logged bug describing this issue here: http://bugs.adobe.com/jira/browse/st-422.
    Please visit it and vote it.
    Thanks,
    Mihai

  • Strobe media playback in Flash?

    Hi everybody,
    is there any way to load the player into a .fla file?
    I'm not able to find anything about that..
    Thanks in advance.

    Thank you, billo! From a first sight, it looks as a slightly different approach, but I'm enthusiastic to try.
    Just for information, I've been able to load an instance of the Strobe Media Playback in Flash (with the Loader class), but when I try to load a second instance I get a
    TypeError: Error #1034
    Does this tell anything?
    It's very strange, because the first instance seems to work perfectly..
    Thanks for the help.

  • What Web Services Strobe Media Playback Uses.

    HI,
    Am I posting correct question or I am wrong
    Does strobe media playback uses any web service.
    If it uses or not please let me know .

    The player supports both standard and advanced delivery methods, including progressive download, RTMP streaming,
    RTMP dynamic streaming, HTTP streaming, HTTP dynamic streaming, and live streaming. Flash Media Playback
    1.5 and Strobe Media Playback 1.5 also provide support for RTMFP multicast content delivery.
    While RTMP(x) streaming are FMS content delivery technologies, the player can also be used with other FMS compatible streaming servers, such as Wowza or Red5.
    In the case you do not need the use of FMS streaming functionality, progressive download is always an alternative (what this means is that all you need is a video that can be served by a webserver like apache, nginx, lightypd, etc).
    As for how the player can be used, these links are allways a good place to start and get a better idea of what it is all about:
    http://www.osmf.org/strobe_mediaplayback.html
    http://blog.theflashblog.com/?p=2087
    Hope this helps.

  • How to stream with the player strobe media playback videos using http dynamic streaming?

    Hi..
    please could i have some help about the player strobe media playback?
    i would like to know how to stream with the player strobe media playback videos using http dynamic streaming.
    I have already installed the server,i put my own video in the video on demand folder.i downloaded the player but i don't know how to stream that video with the adobe protocol dynamic streaming.

    http://osmf.org/configurator/fmp/
    Use this configurator, and use the same code it generates with your strobemediaplayback.swf
    Also make sure the domain where strobemediaplayback.swf is being called from and resides, is in your /webroot/crossdomain.xml  file, or it will not work.

  • How to video via email using flash media playback setup?

    How I can send video via email?  I send every week an email that contain a link to WMV file on our website.  I am trying to send the same thing using flash media player. Here the html generated via flash media playback setup and will not display in an email.  Any advise
    <object width="400" height="400"> <param name="movie" value="http://fpdownload.adobe.com/strobe/FlashMediaPlayback.swf"></param><param name="flashvars" value="src=http%3A%2F%2Fwww.4GodIsLove.com%2F%2FTV%2FFlash%2FLydua_Fares_Elhaana.flv"></param><param name="allowFullScreen" value="true"></param><param name="allowscriptaccess" value="always"></param><embed src="http://fpdownload.adobe.com/strobe/FlashMediaPlayback.swf" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true"  width="400" height="400" flashvars="src=http%3A%2F%2Fwww.4GodIsLove.com%2F%2FTV%2FFlash%2FLydua_Fares_Elhaana.flv"></embed></object>

    salma_salma wrote:
    Thanks Janaki but how can I add a new application? I tried to do it using Flash Media Administration Console but it doesn't work
    Hi Salma,
    To add an application to FMS follow the below steps
    1. Create a folder "my_app" under "$InstallRoot\applications" directory.
    2. For simple server side code... add "main.asc" file inside "$InstallRoot\applications\my_app" directory which has the content like
    application.onConnect = function(clientObj){
         trace('onConnect function");
         return true;
    3. To add streams to the application, creates 'streams' folder inside "$InstallRoot\applications\my_app" directory, within that create '_definst_' folder and then place your FMS supported streams within the directory. So your streams for the 'my_app' application will be at "$InstallRoot\applications\my_app\streams\_definst_\mystream.flv".
    You can connect to this application using the url "rtmp://your_server_name/my_app". To play the stream mystream.flv using video player, use the url "rtmp://your_server_name/my_app/mystream.flv".
    Regards,
    Janaki L

  • Strobe Media Playback, basic code not working with FLV file?

    I am trying to use the following code with Strobe Media Playback swf 1.5:
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
    <head>
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />   
        <title> </title>
        <script type="text/javascript" src="scripts/swfobject.js"></script>
        <script type="text/javascript">
                var flashvars = {};
                    flashvars.src = "song.flv";
                    flashvars.poster = "preview.jpg";
                var params = {};
                    params.movie = "StrobeMediaPlayback.swf";
                    params.allowfullscreen = "false";
                    params.allowscriptaccess = "always";
                var attributes = {};
                // Embed the player SWF:
                swfobject.embedSWF
                    ( "StrobeMediaPlayback.swf" //swf file name
                    , "videoDiv" // targeted div
                    , "652", "366" // width, height
                    , "10.1.0" // Flash version
                    , "scripts/expressInstall.swf" //location of expressinstall script
                    , flashvars
                    , params
                    , attributes
         </script></head>
    <body>
        <div id="videoDiv">
            <video controls="controls" poster="preview.jpg" width="652" height="366">
                <source src="song.flv" type="video/flv" />
                <source src="song.ogg" type="video/ogg" />
            </video>
        </div>
    </body>
    </html>
    However, the page is saying:
    We are having problems with playback. We apologize for the inconvenience.
    My links do not appear to be broken, I have checked them with Firebug / View Source. Has the javascript changed for Strobe 1.5?

    Okay, I think I have it *partly* figured out. If I use the link from the example it works:
    http://players.edgesuite.net/videos/big_buck_bunny/bbb_448x252.mp4
    Does the video have to be online for it to work?

  • Online Code Walk-Through Wednesday on How To Build an OSMF Player Strobe Media Playback

    Wednesday November 17 at 12:00 noon PDT the OSMF User Group is hosting an online  code walk-through of the open source Strobe Media Playback video  player codebase.
    The code walk-through will be lead by Andrian Cucu who is  Adobe's Project Leader on the Flash and Strobe Media Playback video player  project.
    To join, just go to the following link at the meeting time to join the OSMF  User Group's Connect room:
    http://experts.na3.acrobat.com/osmf/
    For further details and to RSVP see the following link:
    http://osmf.groups.adobe.com/index.cfm?event=post.display&postid=30846
    ** ALL ARE WELCOME! **
    ** PLEASE FORWARD THIS MEETING NOTICE TO ALL WHO  YOU THINK MAY BE INTERESTED! **

    The player supports both standard and advanced delivery methods, including progressive download, RTMP streaming,
    RTMP dynamic streaming, HTTP streaming, HTTP dynamic streaming, and live streaming. Flash Media Playback
    1.5 and Strobe Media Playback 1.5 also provide support for RTMFP multicast content delivery.
    While RTMP(x) streaming are FMS content delivery technologies, the player can also be used with other FMS compatible streaming servers, such as Wowza or Red5.
    In the case you do not need the use of FMS streaming functionality, progressive download is always an alternative (what this means is that all you need is a video that can be served by a webserver like apache, nginx, lightypd, etc).
    As for how the player can be used, these links are allways a good place to start and get a better idea of what it is all about:
    http://www.osmf.org/strobe_mediaplayback.html
    http://blog.theflashblog.com/?p=2087
    Hope this helps.

  • Strobe Media Playback requires FMS, HTTP origin

    I want to know that Strobe Media Playback (that uses OSMF 2.0) requires FMS, HTTP Origin and f4fpackager (all of them or any) as server side support for the Dynamic Streaming Sample application,  (OSMF Sample Players given  in the OSMF Sample Folder) to actually do Dynamic http Streaming.
    Also I want to Know that  HTTP Origin Module is Open Source or not.
    http://help.adobe.com/en_US/HTTPStreaming/1.0/Using/WS7b362c044b7dd076-735e76121260080a90e -8000.html#WS8af793f9af34bea079185b712874092c43-8000
    Please Clerify me on this.

    As stated in your other post, you are asking these questions in the wrong forum. Here is the forum for FMS: http://forums.adobe.com/community/flash/flash_media_server
    The Shark wrote:
    It is important to note that your post is in the wrong forum. For future reference, if you have FMS related questions, they should be posted here:
    http://www.adobe.com/go/fms_usergroup/

  • Questions about SMP (Strobe Media Playback)

    Hi all,
    Sorry if I am posting this in a wrong forum. I did not know where else to put this.
    I want to know:
    Is it a web based player that can be embedded in a web browser or is it a desktop application?
    How many domains can SMP be played on?
    Does SMP support bandwidth detection?
    Regards,
    digital mystic

    The player supports both standard and advanced delivery methods, including progressive download, RTMP streaming,
    RTMP dynamic streaming, HTTP streaming, HTTP dynamic streaming, and live streaming. Flash Media Playback
    1.5 and Strobe Media Playback 1.5 also provide support for RTMFP multicast content delivery.
    While RTMP(x) streaming are FMS content delivery technologies, the player can also be used with other FMS compatible streaming servers, such as Wowza or Red5.
    In the case you do not need the use of FMS streaming functionality, progressive download is always an alternative (what this means is that all you need is a video that can be served by a webserver like apache, nginx, lightypd, etc).
    As for how the player can be used, these links are allways a good place to start and get a better idea of what it is all about:
    http://www.osmf.org/strobe_mediaplayback.html
    http://blog.theflashblog.com/?p=2087
    Hope this helps.

Maybe you are looking for