Omit Trace Actions?

I've got a set of SWFs called from a web site. Info security here at my company does webscans to look for potential theats and found the following issue.
Debug Messaging
Summary:
An indication that the trace() function is being utilized was detected due to the presence of debug messaging. This can represent a serious security concern as path names and other information can be revealed. Recommendations include removing all debugging messaging from the application code before it is placed on production servers.
Implication:
The trace() function is used to record programming notes or to display messages in the Output window while testing a movie.
When left in production code, attackers can discover information which can lead to more severe attacks.
Then they send me to this site for more info...
http://www.adobe.com/devnet/flashplayer/articles/secure_swf_apps.html
Compiling clean code
Related threats: Unauthorized local data access
When creating applications, it is a best practice to remove all debug code from the final production releases. This is also a best practice for developing SWF applications. The Omit Trace Actions flag in Flash development environments tells the compiler to remove any trace commands when creating the compiled SWF file. This will make the published SWF smaller and it will remove any excess information or actions from the SWF.
So I guess my question is....is there any way to set 'Omit Trace Actions?' to True in Xcelsius, as you can apparently do in Flex?
Thanks in advance for any help you can provide. Dan

Hi Trigon_15
Same thing happend to me, suddenly trace stopt working, some sort of bug i believe
how it occured i don't know, if added a new SDK, all worked perfect, 2 days later, it just
stopped tracing.
How i solved it?
i've added the compiler argument (-compiler.debug=true) to the Compiler options of the project.
In my case it's tracing again
Hopes it will help you to!
Regards,
Marc
ps. i'm using Flash Builder 4 with Flex SDK 4.1

Similar Messages

  • How do I set "Omit Trace Action" when publishing to SWF?

    I would like my SWF files to be published with the "Omit Trace Action" set to true, but there doesn't seem to be a way to set this via Captivate.  Anyone have an idea?

    I am not an expert with Flash. But going by what Trace Actions do is it checks the value of variable and displays it, in output pane. You can omit it by checking that 'Omit Trace Action' in Flash publish settings. In Captivate, I believe this would not be a case, because you would not be creating your custom objects but using the standard ones from the Library.
    So, I guess you can say, Trace Actions would always be omitted from the output.
    Thanks,
    Anjaneai

  • How to omit trace statements

    Hello,
    is the -omit-trace-statements compiler's option still suposed to work in AIR3.8 and ASC2? I can still see traces of my release build in Scout so it looks it's not removing anything.
    Thanks,
    David

    Hi, did you ever find a way to do this? My release builds are free of traces but I would like to be able to debug on mobile with traces off sometimes. I've tried various compiler options without success.
    Cheers

  • Can't get trace statements omitted from SWC

    I'm trying to create a component. I'm using Flash CS4 and AS2.
    I've been using trace statements while developing and now I want
    to deliver it, without trace statements. I went to the Publish Settings
    and checked Omit trace actions and unchecked Permit debugging.
    I then exported the SWC, restarted Flash, put the component into
    a new FLA and I still get trace statements.
    How do I omit trace statements from a SWC?
    Thanks

    My mistake. The Global variable "Path to configuration file" points to "D:\data\configured.scf". I set that as a constant in the original vi now, so that it is more self-contained now.
    Attachments:
    find_experiment_time_frame_-_sent_to_NI-2.vi ‏70 KB

  • Flash CS3 Strange IDE Problem

    Hi --
    I am having a totally bizarre issue with the Flash CS3 IDE in
    that my
    "Output" window is always blank. This just started happening
    to me today. I
    have tried creating a new Flash movie and putting in a single
    line of
    Actionscript:
    trace("Hi")
    When I run the movie the Output window pops up but its blank.
    Any ideas?
    Thanks
    Rich

    Hi --
    It was the "filter level" setting. I changed it from "none"
    to "verbose" and
    all is good. I never even knew that setting existed so I have
    no idea how I
    changed it! Thank you so much.
    Rich
    "Noelbaland" <[email protected]> wrote in
    message
    news:g8t2nd$4nh$[email protected]..
    > Try this. Open your Output window and go to the options
    menu in the top
    > right
    > corner. In the menu go down to Filter Level and just
    check that None is
    > not
    > checked. If nothing is checked then choose Verbose
    >
    > Another thing you can check is in the Publish Settings
    under the Flash
    > tab.
    > See if the Omit trace actions has been checked - uncheck
    it if it has.
    >
    > Hope that helps!
    >

  • Is it possible to turn off FlashPlayer error pop-up?!

    Hi,
    Is it possible to bypass or turn off the FlashPlayer 10 error pop-up in browser?
    I tried the "omit trace actions" and "permit debugging" in Publish Settings but the pop-up still appears in browser testing.
    The error is well known and I dont need to solve it right now, but I need to show the project to some people without errors.
    Thanks.

    Thats what I thought... the pop-up can be helpful but I wish it could also be bypassed.
    I'll have to apply try...catch.
    Thanks anyway.

  • Flash "Spinny" loader corrupted in FF in Windows with Flash player 10

    Everywhere else I have this on our site, it works fine.
    Here is where it is broken
    In a firefox browser (2, 3, 3.5) with flash player 10 in windows xp (flash player 9 looks fine)
    Everywhere else it looks fine.  I have attached the swf file & a screenshot of what it looks like when it is corrupted.
    I have tried saving it several different ways, but currently it is saved with these settings:
    Version: flash player 9
    Load order: bottom up
    Actionscript version: 2.0
    things checked:
    - Omit trace actions
    - Export hidden layers
    jpeg quality - 80
    I have also tried saving it in an older version (8) with the same results.  Thanks in advance for any suggestions.
    Kris

    Anyone know why my attachments say "queued" instead of showing up so forum members can help me with my problem?
    Thanks,
    -k

  • Desperate!! detect a button press in loaded swf

    CS3, AS2
    Please I am desperate for help with this, its the last
    problem to solve.
    I have a client who has supplied a mp3 player to be used in
    the site.
    It is made by swish jukebox which means I only have a swf.
    (swish jukebox just auto creates a mp3 player via a simple
    interface, no fla file)
    I load it into a empty movie clip.
    I need to detect when the play button on the mp3 player is
    pressed.
    I have determined the name and path of the play mc.
    The button/movie clip is created at runtime, my feeble
    reading on events and listeners makes me think this makes a
    difference to how its handled.
    anyway this is the button path in my main movie, empty being
    the mc I load it into, PLAY being its name
    _root.empty.PLAY
    this is correct I have made it move to check
    some info I found says this is the function associated with
    the play button
    [code]
    function audioPlay() {
    // ==================================================
    // To bind to PLAY button
    // ==================================================
    isPaused = false;
    if (this.Buffer != undefined) {
    this.Buffer = "off";
    ns.pause(false);
    swfAudio.play();
    } else {
    this.Buffer = "on";
    this.currentEntry--;
    playlistNext();
    [code]
    If someone could just show me how to listen for the press and
    trigger a simple trace() that it was clicked I will be fine.
    If needed I can upload a file of the mp3 player or a text
    file of all the actionscript I think it contains. (from a tutorial
    of how to build a mp3 player using swishmax which looks to be
    identical to what the jukebox package does)
    Please someone bail me out
    I am supposed to demo on friday!!!
    thanks
    mark

    in flash go to file and publish settings. in the publish
    settings window select the flash tab and make sure the "omit trace
    actions" check box is NOT checked. If you still have no trace
    output in the output window then your code is really not executing
    which is a whole different issue entirely. It either means the code
    is not on the button or there is an error in the code causing it to
    not execute or something else.
    also make sure your button does not exist on a frame that has
    key frames in it because if there is a key frame then technically
    there are now two instances of the button and you may be sitting on
    a frame with the second instance of the button that has no code on
    it.
    it's hard to tell with out seeing the file.
    let me know if the omit trace actions check box was selected
    if not post up the code for your button.

  • Flash CS6 requires trace from main timeline to embed flex assets

    I've been repeatedly advised on twitter by the @CreativeCloud account to make a thread on this subject.
    This only occurs with large projects that use a lot of memory. I have tried to recreate the problem with the minimum amount of code but it is not possible. This issue does not occur with only the flex.swc, a class file and a .fla project. Changing the value in jvm.ini makes no difference. Importing other swcs makes no difference. Please re-read this line before responding.
    The issue: If I include flex.swc to use the [Embed] tag feature in a class file with Flash CS6, the feature will silently fail. The assets will return the value of null.This issue has existed since Flash CS5 dropped support for flex and has caused our company to lose hundreds of hours in programming workarounds for the problem. We are exceptionally disappointed in Adobe for encouraging use of [Embed] tags and then leaving us with scores of broken projects that cannot be compiled in the latest version of the Flash IDE.
    However: this week I discovered that the problem disappears if I import the class on the timeline and trace() the value of any asset in the class. Importing the class is not the part that solves the problem. If I have the "omit trace" checkbox ticked, the assets still return null. It is only when the assets are fed to trace() that they begin to exist.
    Think this through for a second.
    The workaround for a critical bug in Flash is solved by trace(). "Hello World!" is the solution to the Flash IDE's ongoing mismanagement of memory.
    I can't even begin to wrap my head around how stupid this situation is. Or even how much money has been lost trying to deal with the situation.
    I don't even expect a workaround or solution in response to this because we already have a workaround - even though it is insane.

    I've been repeatedly advised on twitter by the @CreativeCloud account to make a thread on this subject.
    This only occurs with large projects that use a lot of memory. I have tried to recreate the problem with the minimum amount of code but it is not possible. This issue does not occur with only the flex.swc, a class file and a .fla project. Changing the value in jvm.ini makes no difference. Importing other swcs makes no difference. Please re-read this line before responding.
    The issue: If I include flex.swc to use the [Embed] tag feature in a class file with Flash CS6, the feature will silently fail. The assets will return the value of null.This issue has existed since Flash CS5 dropped support for flex and has caused our company to lose hundreds of hours in programming workarounds for the problem. We are exceptionally disappointed in Adobe for encouraging use of [Embed] tags and then leaving us with scores of broken projects that cannot be compiled in the latest version of the Flash IDE.
    However: this week I discovered that the problem disappears if I import the class on the timeline and trace() the value of any asset in the class. Importing the class is not the part that solves the problem. If I have the "omit trace" checkbox ticked, the assets still return null. It is only when the assets are fed to trace() that they begin to exist.
    Think this through for a second.
    The workaround for a critical bug in Flash is solved by trace(). "Hello World!" is the solution to the Flash IDE's ongoing mismanagement of memory.
    I can't even begin to wrap my head around how stupid this situation is. Or even how much money has been lost trying to deal with the situation.
    I don't even expect a workaround or solution in response to this because we already have a workaround - even though it is insane.

  • Trace() not working with embedded SWFs created with Flash Builder

    I have just migrated to Flash Builder 4.5 with the 4.5.1 SDK.
    I have an application that loads a lot of child SWFs into it - some of which are created with Flash, some are created with Flash Builder.
    I am noticing now that my trace() statements that are called from within SWFs produced with Flash Builder that are loading as child SWFs into my main SWF are NOT appearing.  However, trace() statements called from within SWFs produced with Flash that are loading as child SWFs into my main SWF ARE appearing.
    This is an extremely major problem and has short-circuited my debugging/development.
    Any recommendations, workarounds, or suggestions?

    If the child SWFs were created by performing an "Export Release Build", then trace() statements would be omitted.
    You can control this by setting the -omit-trace-statements compiler argument (in Project properties -> Flex Compiler -> Additional Compiler Arguments).
    -Anirudh

  • Trace not working in air / as3

    Hi, this may be something obvious but after installing adobe
    air, trace no longer works to my output window.
    I've checked the publish settings and 'omit traces' is
    unchecked.
    thanks

    Hi Trigon_15
    Same thing happend to me, suddenly trace stopt working, some sort of bug i believe
    how it occured i don't know, if added a new SDK, all worked perfect, 2 days later, it just
    stopped tracing.
    How i solved it?
    i've added the compiler argument (-compiler.debug=true) to the Compiler options of the project.
    In my case it's tracing again
    Hopes it will help you to!
    Regards,
    Marc
    ps. i'm using Flash Builder 4 with Flex SDK 4.1

  • Need Help with Trace();

    I am trying to get trace(); to work in Flash MX 2004
    have resorted to a small test
    myvar = "hello";
    trace(myvar);
    it works for a buddy of mine... but it wont work for me... no
    combination of trace will work.. I can't get de bug to work either
    it's like they are disabled...
    I looked at my publish settings and the omit trace was not
    selected
    I am also looking for the mm.cfg file to change the the
    setting manualy but I can't find that file I searched hidden files
    as well.
    any idea's would be great...

    I have the same problem

  • Trace in output

    Hello,
    i recently switched to flash cs6 and i noticed that no traces go to output window. I searched forums and found 2 common things which i checked:
    1. publish settings -> omit trace statements - not switched on
    2. output window ->filter level -> verbous
    So is there anything im missing? How can i enable the trace to show in output window again?

    Have you tried using debug movie? In CS5.5 both test and debug send traces but perhaps it changed in CS6. Try CTRL+SHIFT+ENTER (Windows) or CMD+SHIFT+ENTER (Mac) to run the debugger and see if you see your traces.

  • Changing the _alpha value of a movie does nothing for me

    Hi
    This is probably a real basic problem but it has had me
    tearing my hair out.
    I have two movies which I have moved into position
    programatically and now I wish to alter the _alpha value of them.
    Putting a trace on the fadeMovie function shows that the
    value is decreasing but I can see no visual affect
    Please help!!!!!
    var words = new Array("Traffic Conversion Rates are falling",
    "Text2", "Text 3");
    var word = new String("As A Result Sales Are Falling");
    var canvasSize = 550;
    var midPoint = canvasSize/2;
    var screenClearCount = 1;
    var currentAction = 1;
    var TextSpacing = 70;
    attachMovie("TextDesc_1", "Text_mc", 1);
    Text_mc._x = -250;
    Text_mc._y = 100;
    Text_mc.textDesc = words[0];
    attachMovie("TextDesc_1", "texthold_mc", 2);
    texthold_mc._x = 600;
    texthold_mc._y = 150;
    texthold_mc.textDesc = word;
    onEnterFrame = function () {
    if (currentAction == 1) {
    actionOne();
    if (currentAction == 2) {
    fadeMovie(Text_mc)
    fadeMovie(texthold_mc)
    // fadeMovie(texthold_mc)
    function moveMovieClip(movie, moveDirection) {
    if (moveDirection == "Forwards") {
    movie._x += 10;
    } else {
    movie._x -= 10;
    function actionOne() {
    trace("Action one");
    if (Text_mc._x<=((midPoint)-(Text_mc._width/2))) {
    moveMovieClip(Text_mc, "Forwards");
    } else if
    (texthold_mc._x>=((midPoint)-(texthold_mc._width/2))) {
    moveMovieClip(texthold_mc, "Backwards");
    } else {
    currentAction = 2;
    function fadeMovie(movie) {
    if (movie._alpha>0) {
    movie._alpha -= 10;

    I have only glanced at the code, but it would appear that you
    are trying to fade movieclips that contain text (either that or you
    name your movie clips really wierdly!).... Anyway try embedding the
    text. Hope this helps.

  • How to use a menu model with a dynamic region and a task flow parameter

    I am using JDeveloper/ADF 11.1.2.1
    I have a menu model that changes which task flow is displayed in a given dynamic region using a backing bean. That works fine. I would like to be able to pass parameters to that task flow based on which menu item is clicked. For example: i have a task flow which shows a page where input fields are used to filter a table. Depending on the value of the task flow parameter I want to change which input fields are displayed. So i will have multiple menu items which refer to the same task flow but have a different set of parameters. I have tried using request scope variables and setting them in the backing bean for the dynamic region which works until the query is submitted at which point the request scope has changed and the value is no longer available. I have tried a number of other 'creative' approaches but have not gotten anything to work. Anyone done this before? Or have an idea on how to solve it?

    Frank,
    I did a fair bit of digging based on your suggestions and some things I found in your Oracle Fusion Developer's Guide book and I came up with something that works really well. It is fairly elegant but requires code. It would be nice if something like a setPropertyListener could be rolled into the menu model. That would make my solution completely declarative.
    Here is my solution:
    My task flow requires a the value #{pageFlowScope.type} to be set. My application has a dynamic region that is changed on the fly using a menu model. The region uses a backing bean (mainRegionManagerBean) which is in the viewScope to manage what taskflow is shown in the region. There are multiple menu items in the menu model that point to the same task flow but pass different values to the #{pageFlowScope.type} parameter. So i wired the menu items up to different methods in the mainRegionManagerBean which set the value for me. See the relevant code below.
    I would be very interested in the feedback from someone with more experience than I on my solution. Maybe there is a more elegant way...
    In the backing bean there is a primary method that was created by generating a dynamic region link which sets the task flow id and then other methods which call it and set the relevant parameters. (JSFUtils is a helper class i wrote to centralize some common tasks):
    public String shipmentTraceMasterTaskflow()
    taskFlowId = "/WEB-INF/taskflow/master/shipmentTraceMasterTaskflow.xml#shipmentTraceMasterTaskflow";
    JSFUtils.setValue("pageFlowScope.type", "");
    return null;
    public String shipmentTraceProNumber()
    shipmentTraceMasterTaskflow();
    JSFUtils.setValue("pageFlowScope.type", "pronumber");
    return null;
    public String shipmentTraceBOLNumber()
    shipmentTraceMasterTaskflow();
    JSFUtils.setValue("pageFlowScope.type", "bolnumber");
    return null;
    In the menu model (notice that these reference the different methods from above):
    <itemNode id="itemNode_ProNumberTrace" label="ProNumber Trace" action="#{viewScope.mainRegionManagerBean.shipmentTraceProNumber}" focusViewId=""/>
    <itemNode id="itemNode_BOLNumberTrace" label="BOL Number Trace" action="#{viewScope.mainRegionManagerBean.shipmentTraceBOLNumber}" focusViewId=""/>
    On the page:
    <af:region value="#{bindings.dynamicRegion1.regionModel}" id="r1"/>
    In the pagedef:
    <taskFlow id="dynamicRegion1" taskFlowId="${viewScope.mainRegionManagerBean.dynamicTaskFlowId}" activation="deferred" xmlns="http://xmlns.oracle.com/adf/controller/binding" Refresh="ifNeeded">
    <parameters>
    <parameter id="type" value="#{pageFlowScope.type}"/>
    </parameters>
    </taskFlow>
    Edited by: Adam Stortz on Nov 22, 2011 11:10 AM

Maybe you are looking for