Security Sandbox Violation when calling a remote service from a worker

From my application, I make calls to a BlazeDS server, that works fine.
I added a worker that calls the same services on the same server. But then, only for the calls from the worker, I have a Security Sandbox Violation error. I launch the application from FB in debug mode.
This is the message :
Error: [strict] Ignoring policy file at http://xxxxxxxxxxxx/crossdomain.xml due to incorrect syntax. See http://www.adobe.com/go/strict_policy_files to fix this problem.
*** Security Sandbox Violation ***
Connection to http://xxxxxxxxxxxxxx/appstore-admin/messagebroker/amfpolling halted - not permitted from file:///D:/Projects/appstoreClientsNext/MultiAppstoreAdmin/bin-debug/MultiAppstoreAdmin.swf
Error: Request for resource at http://xxxxxxxxxxxxx/appstore-admin/messagebroker/amfpolling by requestor from file:///D:/Projects/appstoreClientsNext/MultiAppstoreAdmin/bin-debug/MultiAppstoreAdmin.swf is denied due to lack of policy file permissions.
What should I do to allow the worker to make remote calls ?

I made some progress on this. There are two different cases :
1) The service you want to access has a crossdomain.xml file
All the workers can access the service without a problem.
2) The service you want to access doesn't have a crossdomain.xml file
Whether you launch from FB in debug mode or you put your application on the same server you are trying to access, only the primordial worker will access the service, the other workers will encounter a security error.
I believe this is a bug. Shouldn't a worker have the same access privileges as the primordial worker ?

Similar Messages

*** Security Sandbox Violation *** when calling a You Tube video

Hi,
I get an error when I run my SWF, it says
*** Security Sandbox Violation ***
SecurityDomain 'http://s.ytimg.com/yt/swfbin/apiplayer3-vflS6GT64.swf' tried to access incompatible context 'file:///C|/Users/mww/web/crafty%20copy/10%2D11.swf'
My code is
// start of code
Security.allowDomain("www.youtube.com");
var my_playerbject;
var my_loader:Loader = new Loader();
my_loader.load(new URLRequest("http://www.youtube.com/apiplayer?version=3"));
my_loader.contentLoaderInfo.addEventListener(Event .INIT, onLoaderInit);
function onLoaderInit(e:Event):void{
movArticles.movArticle2.videoPlayerHolder.videoMov 2.addChild(my_loader);
my_player = my_loader.content;
my_player.addEventListener("onReady", onPlayerReady);
function onPlayerReady(e:Event):void{
my_player.setSize(640,360);
my_player.cueVideoById("CtOj8kpLIlI",0);
// end of code
Any help would be much apreciated, Thanks

I tried adding those, as well as these :
Security.allowDomain("www.youtube.com");
Security.allowDomain("s.ytimg.com");
Security.allowDomain("s2.ytimg.com");
Security.allowDomain("*.youtube.com");
Security.allowDomain("*.ytimg.com");
Security.allowDomain("com.google.utils.SafeLoader");
Security.allowDomain("http://s.ytimg.com");
Security.allowDomain("http://www.youtube.com/apiplayer?version=3");
Security.allowDomain("o-o.preferred.lhr14s07.v15.lscache6.c.youtube.com");
Security.allowDomain("i1.ytimg.com");
Security.allowDomain("i2.ytimg.com");
Security.allowDomain("i3.ytimg.com");
Security.allowDomain("i4.ytimg.com");
Security.allowDomain("http://www.youtube.com");
Security.allowDomain("googleads.g.doubleclick.net");
Security.allowDomain("gdata.youtube.com");
Security.allowDomain("http://s0.2mdn.net");
Security.allowDomain("http://pagead2.googlesyndication.com");
Security.loadPolicyFile("http://www.youtube.com/crossdomain.xml");
Security.loadPolicyFile("http://s2.youtube.com/crossdomain.xml");
Security.loadPolicyFile("www.youtube.com");
Security.loadPolicyFile("http://www.youtube.com");
Security.loadPolicyFile("s.ytimg.com");
Security.loadPolicyFile("http://s.ytimg.com");
Security.loadPolicyFile("s2.ytimg.com");
Security.loadPolicyFile("i1.ytimg.com");
Security.loadPolicyFile("i2.ytimg.com");
Security.loadPolicyFile("i3.ytimg.com");
Security.loadPolicyFile("googleads.g.doubleclick.net");
Security.loadPolicyFile("gdata.youtube.com");
Security.allowInsecureDomain("www.youtube.com");
Security.allowInsecureDomain("http://www.youtube.com");
Security.allowInsecureDomain("*.youtube.com");
Security.allowInsecureDomain("s.ytimg.com");
Security.allowInsecureDomain("http://s.ytimg.com");
Security.allowInsecureDomain("s2.ytimg.com");
Security.allowInsecureDomain("*.ytimg.com");
Security.allowInsecureDomain("i1.ytimg.com");
Security.allowInsecureDomain("i2.ytimg.com");
Security.allowInsecureDomain("i3.ytimg.com");
Security.allowInsecureDomain("googleads.g.doubleclick.net");
Security.allowInsecureDomain("gdata.youtube.com")
YouTube's own ActionScript player example gives the same warnings. I think it might be something to do with the way the API is loaded, because instead of using a Loader & URLRequest I use:
<s:SWFLoader id="swfload" source="http://www.youtube.com/apiplayer?version=3"/>
Then in ActionScript:
protected var player:Object;
player=swfload.content;
Then access the API like this:
player.setPlaybackQuality(q);
Every attempt I made to use a Loader resulted in an error when accessing the API: "Access of undefined property setPlaybackQuality", but when loaded into an Object like YouTube's own example, Flex does not check for these functions before compiling and accesses them after they have loaded. I tried finding out about bridges among other things, but even the YouTube forums cannot answer this one and it is a common problem.
            Security.allowDomain("www.youtube.com");
            Security.allowDomain("s.ytimg.com");
            Security.allowDomain("s2.ytimg.com");
            Security.allowDomain("*.youtube.com");
            Security.allowDomain("*.ytimg.com");
            Security.allowDomain("com.google.utils.SafeLoader");
            Security.allowDomain("http://s.ytimg.com");
            Security.allowDomain("http://www.youtube.com/apiplayer?version=3");
            Security.allowDomain("o-o.preferred.lhr14s07.v15.lscache6.c.youtube.com");
            Security.allowDomain("i1.ytimg.com");
            Security.allowDomain("i2.ytimg.com");
            Security.allowDomain("i3.ytimg.com");
            Security.allowDomain("i4.ytimg.com");
            Security.allowDomain("http://www.youtube.com");
            Security.allowDomain("googleads.g.doubleclick.net");
            Security.allowDomain("gdata.youtube.com");
            Security.allowDomain("http://s0.2mdn.net");
            Security.allowDomain("http://pagead2.googlesyndication.com");
            Security.loadPolicyFile("http://www.youtube.com/crossdomain.xml");
            Security.loadPolicyFile("http://s2.youtube.com/crossdomain.xml");
            Security.loadPolicyFile("www.youtube.com");
            Security.loadPolicyFile("http://www.youtube.com");
            Security.loadPolicyFile("s.ytimg.com");
            Security.loadPolicyFile("http://s.ytimg.com");
            Security.loadPolicyFile("s2.ytimg.com");
            Security.loadPolicyFile("i1.ytimg.com");
            Security.loadPolicyFile("i2.ytimg.com");
            Security.loadPolicyFile("i3.ytimg.com");
            Security.loadPolicyFile("googleads.g.doubleclick.net");
            Security.loadPolicyFile("gdata.youtube.com");
            Security.allowInsecureDomain("www.youtube.com");
            Security.allowInsecureDomain("http://www.youtube.com");
            Security.allowInsecureDomain("*.youtube.com");
            Security.allowInsecureDomain("s.ytimg.com");
            Security.allowInsecureDomain("http://s.ytimg.com");
            Security.allowInsecureDomain("s2.ytimg.com");
            Security.allowInsecureDomain("*.ytimg.com");
            Security.allowInsecureDomain("i1.ytimg.com");
            Security.allowInsecureDomain("i2.ytimg.com");
            Security.allowInsecureDomain("i3.ytimg.com");
            Security.allowInsecureDomain("googleads.g.doubleclick.net");
            Security.allowInsecureDomain("gdata.youtube.com")

Tpinit error when call a remote service

i have to call a remote tuxedo service in my local service,and the remote
service need to be authenticated when use tpinit. when i use tpinit in my
service,it will be error, i think maybe the application does not know which
tuxedo service i will call(local or remote),so,it may think my tpinit was
for my local service,then some error here.
what shall i do when call a remote service which need to be authenticated at
tpinit???
fish

it's ok now,i made a stupid mistake.:)
"Anthony Fryer" <[email protected]> Ð´ÈëÏûÏ¢ÐÂÎÅ
:[email protected]..
>
What you should do is configure DOMAIN gateways between the remote tuxedodomain
and your own local domain. Then you don't need to call tpinit at all fromthe
local service that calls the remote service.
"fish" <[email protected]> wrote:
i have to call a remote tuxedo service in my local service,and the remote
service need to be authenticated when use tpinit. when i use tpinit in
my
service,it will be error, i think maybe the application does not know
which
tuxedo service i will call(local or remote),so,it may think my tpinit
was
for my local service,then some error here.
what shall i do when call a remote service which need to be authenticated
at
tpinit???
fish

Security Sandbox Violation when trying to open new window

Hi guys
I have a flash button that I would like to open a new window
of a specific size when clicked. I found some code on a thread at
flashkit and tried that out, but when testing in flash I get the
following message:
*** Security Sandbox Violation ***
Connection to javascriptopenNewWindow('
http://www.designlogic.com.ph/assets/Web_pages/tropicanacomp.gif','height=500,width=500,to p=10,left=100,toolba
r=no,scrollbars=yes') halted - not permitted from
file:///C|/Users/James/Graphics/Websites/Design%20Logic/Raw%5FImages/Flash/flashbuttons/G allery%20icons/webPagesIcons/Tropicana1.swf
Here is the code I inserted into the actionscript:
on (release) {
getURL("javascriptopenNewWindow('
http://www.designlogic.com.ph/assets/Web_pages/tropicanacomp.gif','height=500,width=500,to p=10,left=100,toolba
r=no,scrollbars=yes') ");
I also tried steamrolling ahead and testing it from
dreamweaver after inserting the flash onto my page, but it doesn't
fucntion. No surprises there.
Would really appreciate it if someone could help me out with
this.

Oh its AS 2.0 by the way :)

ORA-06553: PLS-908 when calling 10g remote procedure from 11g database

Hi,
I have 2 instances: 11g (11.1.0.7) and 10g (10.2.0.4). When I try to call 10g (remote) procedure from 11g database, there is errors:
ORA-04052: error occurred when looking up remote object CUSTOMER.PRL_PK2_GENERAL@CUSTOMER_LINK
ORA-06541: PL/SQL: compilation error - compilation aborted
ORA-06553: PLS-908: The stored format ofCUSTOMER.PRL_PK2_GENERAL@CUSTOMER_LINK is not supported...
But, if I call the same procedure from another 10g instance, it's OK.
How can I fix the problem?
Thx,
qtpham

As you can see ,it seems like the workaround that was mentioned there is currently the only way to remove this ORA.
Workaround: Remove the function call(s) from the called subroutine's
package's spec.

Slow response when calling a web service from an ADF client in JDev 11g

I have generated a web service (WS) for a stored procedure package with 3 functions. The WS has less than 1 second response times when I use the standard WS testing facility. I then created a data control for the WS selecting the default values in the JDev wizard. When I test the functions from a very basic ADF client the response times for the same functions are between 3-4 seconds i.e. very SLOW compared to the actual response time of WS. I need some advice on how to investigate this performance degredation as seen from the ADF client.
Could the problem be that the data control was created from a web service in the same project? Maybe it is necessary to have them in separate projects or create a proxy?
I created and tested the web service with the standard WS test tool and then simply went on to create a data control from this web service for use from a ADF client.
Some background info:
I saw the following warning in step 8 of the WS creation wizard:
"The configured policy store location at "C:\Oracle\Middleware\jdeveloper\j2ee\home\gmds" is invalid. Application cannot read policies from this location. Check that the directory name is correct and the location exists."
Also I can confirm that there is no j2ee directory in my environment.
The application server logs the following for each call from the ADF client:
009-apr-01 15:55:22 oracle.adf.model.connection.webservice.impl.WebServiceConnectionMessages debugGetSaajInteraction
INFO: Creating a SaajInteraction for oracle.j2ee.ws.model.OperationImpl@1c81d2c
2009-apr-01 15:55:22 oracle.adf.model.connection.webservice.impl.WebServiceConnectionMessages debugGetSaajInteractionResult
INFO: Created [email protected]79edc for oracle.j2ee.ws.model.OperationImpl@1c81d2c
2009-apr-01 15:55:22 oracle.j2ee.ws.rm.LogMessages logExceptionAsWarning
VARNING: Internal error: oracle.wsm.policy.model.PolicyModelException: WSM-01647 : There are no policies that match the specified category wsrm and resource pattern {1}.
2009-apr-01 15:55:22 oracle.fabric.common.AbstractSecurityInterceptor init
INFO: AbstractSecurityInterceptor:init(), client.mode.jse==ture and isJEE==true, probably is a case of JEE client calling JSE client
2009-apr-01 15:55:22 oracle.wsm.agent.WSMAgent init
INFO: WSMAgent is initialized for category=management, function=agent.function.client, topologyNodePath=null, isJ2EE=true
2009-apr-01 15:55:22 oracle.fabric.common.AbstractSecurityInterceptor init
INFO: AbstractSecurityInterceptor:init(), client.mode.jse==ture and isJEE==true, probably is a case of JEE client calling JSE client
2009-apr-01 15:55:22 oracle.wsm.agent.WSMAgent init
INFO: WSMAgent is initialized for category=security, function=agent.function.client, topologyNodePath=null, isJ2EE=true
2009-apr-01 15:55:24 oracle.wsm.common.logging.WsmMessageLogger logSevere
ALLVARLIG: error in the Oracle WSM Policy Resolver Initialization, because incorrect configuration is passed: {0} {1}
Edited by: user10601664 on Apr 8, 2009 7:11 AM

Find solution. Check this thread:
https://www.sdn.sap.com/irj/sdn/wiki?path=/display/wdjava/faq%2b-%2bmodels%2b-%2badaptive%2bweb%2bservice
The com.sap.tc.webdynpro.model.webservice.api.IWDWSInvocationModifier interface can be implemented by an application using the Adaptive Web Service model in order to modify the web service invocation object just before it's execution. Invocation modifiers need to be registered with the executable model class for which invocation is to be modified:
Request_NumberToWords requestMO = new Request_NumberToWords(model);
requestMO.wdSetInvocationModifier(
new IWDWSInvocationModifier() {
    public void doModifyInvocation(Object port) {
      HTTPControlInterface httpItf = HTTPControlFactory.getInterface(port);
      //timeout for this WS invocation is 120 sec; don't use global config. setting of WS-Runtime
      httpItf.setSocketTimeout(120000);
    public void doModifyAfterInvocation() {}
Best regards.

ORA-01403: no data found when calling a web service from HTMLDB

I am working through Section 6 How to Implement a Web Service of the HTML DB 2 Day Developer tutorial. I can get the first example to work but not the second one. I am able to add the web reference and create the form and report. However, when I run the page and click submit, I get ORA-01403: no data found.
When I test the service, this is what shows in the Message Request:
<?xml version='1.0' encoding='UTF-8'?><SOAP-ENV:Envelope
xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:xsi="http://www.w3.org/1999/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/1999/XMLSchema">
<SOAP-ENV:Header><namesp1:Header xmlns:namesp1="http://www.xignite.com/services/"><namesp1:Username xsi:type="xsd:string"></namesp1:Username><namesp1:Password xsi:type="xsd:string"></namesp1:Password><namesp1:Tracer xsi:type="xsd:string"></namesp1:Tracer></namesp1:Header></SOAP-ENV:Header><SOAP-ENV:Body><namesp1:ListFuturesByExchange xmlns:namesp1="http://www.xignite.com/services/"><namesp1:Exchange xsi:type="xsd:string">NYMEX</namesp1:Exchange></namesp1:ListFuturesByExchange></SOAP-ENV:Body></SOAP-ENV:Envelope>
Nothing shows in the Message Response.
I have also tried to call a simple web service that I created in .NET. It exhibits the same behavior. I am able to add the reference and create the form. But when I click the submit button, I get ORA-01403: no data found.
Windows 2000
HTMLDB 2.0.0.00.49
Oracle9i 9.2.0.6.0
Any help will be greatly appreciated.

I'm having a similar problem!, Although, distressing as it is to observe the lack of response this thread has had for 9 months, I'm still seeking help here!
I created a web service reference according to the following WSDL : "http://OgAppExpress:[email protected]:5555/invoke/OgAdminUtils.pub:WSDL_HLR" (operation name="getSubscriberInfoByMSISDN") and a form on that web service, all of which went very nicely. But! When I ran the form, inserted the value ("3546933599") into the parameter and pressed submit.... => "ORA-01403: no data found"
The debug action displays very limited information and sheds no light on the problem :( Multiple attempts, on recreating the project from scratch, have resulted in the same utter failure! Needless to say, this nulls the affect of my Prozac proscription....
Is there anybody out there who can help me and defend APEX's reputation?

Error when calling Java Web Services from ABAP.

Hello experts:
    In my project, I will call Java Web Services with ABAP coding. With WSDL, I generated a proxy class and created a HTTP connection (t-code: SM59) and a logical port (t-code:lpconfig) for this proxy class. But when running, I would receive the folllowing errors:
   SOAP:1.023 SRT: Processing error in Internet Communication Framework: ("ICF Error when receiving the response: HTTP COMMUNICATION FAILURE")
   If I used HTTPS, there is no problem.
Regards
Bob

Hi Bob,
It might be the possibility that your java web server is configured to listen only on HTTPS.
If your HTTPS is working fine, then first check with your JAVA server for HTTP connectivity, then try it calling through ABAP.
Regards,
Piyush

SocketTimeoutException when calling a web service from a WD application

I'm trying to call a method of a web service from my WD application. The execution of the method longs more than 60 sec, so I'm always getting:
Service call exception; nested exception is: java.net.SocketTimeoutException: Read timed out
I've got this post, which tells to change the property "socketTimeout" of the client.
Read Timed Out Error
But I don't know what is the client in my WD application, does this refer to the logical port ?
I've tried inserting this into wdInit:
com.hesa.hesanet3.h3wsmodel.proxies.Hesanet3Impl service = com.hesa.hesanet3.h3wsmodel.H3WSModel.getServiceImpl();
logicalPort =(com.hesa.hesanet3.h3wsmodel.proxies.Hesanet3ViDocument) service.getLogicalPort("Config1Port_Document", com.hesa.hesanet3.h3wsmodel.proxies.Hesanet3ViDocument.class);
logicalPort._setProperty("socketTimeout", "30000");
But it doesn't work.
I've tried getting the logical port from the model object corresponding to the method of the webservice unsuccesfully.
I've tried with Visual Administrator -> instance -> Web Service Container -> Settings -> WS Clients Socket Timeout, increasing to 120 secs. No result, still stop at 60s.
I've tried with Visual Admin -> global configuration -> Http provider -> KeepAliveTimeout, increasing to 120 secs, and still stop at 60s.
I can't change model object code, but I've tried to debug it and setting the property in stubForLogicalPort and in _getGlobalFeatureConfig(), without change.
I'm using a HTTP Destination, does this have something to do?
I'm getting insane with this and I'm in urgent need of help.
How can I change the time the WD waits for the WebService to answer ?
Thanks in advance.

Find solution. Check this thread:
https://www.sdn.sap.com/irj/sdn/wiki?path=/display/wdjava/faq%2b-%2bmodels%2b-%2badaptive%2bweb%2bservice
The com.sap.tc.webdynpro.model.webservice.api.IWDWSInvocationModifier interface can be implemented by an application using the Adaptive Web Service model in order to modify the web service invocation object just before it's execution. Invocation modifiers need to be registered with the executable model class for which invocation is to be modified:
Request_NumberToWords requestMO = new Request_NumberToWords(model);
requestMO.wdSetInvocationModifier(
new IWDWSInvocationModifier() {
    public void doModifyInvocation(Object port) {
      HTTPControlInterface httpItf = HTTPControlFactory.getInterface(port);
      //timeout for this WS invocation is 120 sec; don't use global config. setting of WS-Runtime
      httpItf.setSocketTimeout(120000);
    public void doModifyAfterInvocation() {}
Best regards.

Error when calling simple restful service from SOA 11G

Hi'
I have a URL for simple restful service
http://xxxxx:857/swift/v2/EMPIDChanges/{bookmarkDate}
GET method
I am able to invoke this from IE and This URL is also accessible in UNIX server where SOA server is deployed.
http://xxxxx:857/swift/v2/EMPIDChanges/2012-11-28%2005:57:49
I am using HTTP Binding adapter,
This is what goes in the composite.xml
<reference name="ff" ui:wsdlLocation="ff.wsdl">
<interface.wsdl interface="http://xmlns.oracle.com/pcbpel/adapter/http/AssetID/Test_AssetID_VL/ff#wsdl.interface(Request_Response_ptt)"/>
<binding.ws port="http://xmlns.oracle.com/pcbpel/adapter/http/AssetID/Test_AssetID_VL/ff#wsdl.endpoint(ff/Request_Response_pt)"
location="ff.wsdl" supports="http">
<property name="http.verb" type="xs:string" many="false">GET</property>
<property name="endpointURI" type="xs:string" many="false">http://xxxxx:857/swift/v2/EMPIDChanges/{bookmarkDate}</property>
<property name="http.payload" type="xs:string" many="false">url-encoded</property>
<property name="oracle.webservices.auth.username" type="xs:string" many="false" override="may">Test1</property>
<property name="oracle.webservices.auth.password" type="xs:string" many="false" override="may">Test1</property>
</binding.ws>
however I am getting error
<remoteFault xmlns="http://schemas.oracle.com/bpel/extension">
-<part name="summary">
<summary>oracle.fabric.common.FabricInvocationException: Unable to access the following endpoint(s): REPLACE_WITH_ACTUAL_URL</summary>
</part>
-<part name="detail">
<detail>Unable to access the following endpoint(s): REPLACE_WITH_ACTUAL_URL</detail>
</part>
-<part name="code">
<code>null</code>
</reference>
Please advice,
Thanks,
Yatan

WS Binding: exception durign SOAP invocation: java.util.NoSuchElementException
Looks like the error is in the data sent to or expected from the service in your composite. Check that audit logs and composite flow to make sure your soap message when using soapui matches what you are working with in soa suite.

I am getting Contraint violations when I send out emails from my work website. This has never happened before. What could this be?

Why am I getting Contraint Violations when I go to forward or to send an email out from the URL noted? I have never received this before and am not able to work like this.
Thank you,
Sandra

That doesn't sound familiar. Is this a pop-up message from Firefox, or an error that appears in a web page after you click send, or an error that is sent back to you from a mail server (e.g., like a non-delivery receipt message)?

Security sandbox violation when URL doesn't have 'www'

I am loading an external swf file from the same domain into my main flash movie using an absolute path: "http://www.sitename.com/movie.swf". The problem is that when someone goes to the site without the 'www' in the address: "http://sitename.com" - the movie throws a sandbox error upon trying to load the 2nd movie.
I have a crossdomain in place set to: <allow-access-from domain="*" secure="false"/>.
I also have: Security.allowDomain("*"); in the document class of the main movie.
I realize I could use a relative path to load the movie instead of the absolute path, but shouldn't the cross domain file and/or the allowDomain command take care of the security issues? Is there another workaround besides the relative path?
Thanks,
Amanda

The crossdomain should work. Check to make sure you have it set up properly.
Another workaround is to use the LocalConnection class to grab the current domain. We do this at my company, where we distribute files out to the local server of the branch.
import flash.net.LocalConnection;
var lc:LocalConnection = new LocalConnection();
var myIP:String = lc.domain();
var pathToLoad = "http://"+myIP+"/movie.swf";

"Invalid text value" error when calling a web service from a workflow in SharePoint Online

I'm trying to create a workflow that loops through a list in SharePoint Online using a REST web service call. However, I'm having
some trouble trying to pass the authentication token as described in the following article.
http://www.fabiangwilliams.com/2013/09/03/more-on-sharepoint-2013-r...
Basically, the workflow stops right at the "Call web service" action, and the only error it tells me is the following.
Invalid text value.
A text field contains invalid data. Please check the value and try again
Has anyone had success with web service calls to SharePoint Online?
Dan Kreitz, Solutions Architect, Séafra Inc.

Hi DanPoint,
Thank you for your sharing!
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support

Flash CS5.5: Loading XML-file causes a "Security Sandbox Violation"

Hi,
after upgrading from CS3 to CS5.5, i get a "Security Sandbox Violation" when loading a XML-file. With CS3 everything was fine, but now my file is not working any more. The XML-file and my SWF-file are stored in the same directory and it nether work local nor on the webserver.
I don't know the correct message in english, but flash tells me something like:
"Security Sandbox Violation"
access to file:[]data.xml disconnent - not allowed from file:[]myfile.swf
Why am I not allowed to load an XML-file from the same directory/domain any more? And how can I get my data into my flash-File now?
It doesn't seems to be a Flash-Player-Problem, because an older version with the same code still works. So the problem has to be located in Flash CS5.5
Can anybody help me? Thanks a lot!
Sonja

Please ask such questions on the product specific forums. It is highly doubtful that anyone wil lsee it here.
Mylenium

Air app, Rest service, Security sandbox violation

Hi All,
I wrote an app a couple of years ago using flex 3 that connects to a number of remote web services and does various things.
This worked fine.
Now I have been asked by the customer to update the app as it stopped working at some point.
I am trying to use the resthttpservice library to do a PUT operation, but I am getting the following error when I try and create a socket to the remote server:
Error #2048: Security sandbox violation: app:/main.swf cannot load data from http://my.host:8182
Now, it's been a while since I've done anything with flex so I am rusty. But this error is usually fixed by having a crossdomains.xml file on the remote server. But it was my understanding that this was only required when one's app was running from within the browser and that desktop applications are not effected.
Can anyone clarify this for me? It seems that there were changes made to the flash player in version 10 that might have changed this.
I am very puzzled at this point!
thanks for any help!

These articles discuss security changes between FP 9 and 10:
http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html
http://www.adobe.com/devnet/flashplayer/articles/fplayer9-10_security.html
What is impacted?
This change can potentially affect any SWF file accessing cross-domain content. This change affects SWF files of all versions played in Flash Player 10 and later. This change affects all non-app content in Adobe AIR (however, AIR app content itself is unaffected).
What do I need to do?
Read the article: http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html

Security Sandbox Violation when calling a remote service from a worker

Similar Messages

Maybe you are looking for