Webservice and Flash Security Settings

I have a flash file that is making a call to a webservice on
another domain. When I run the flash file it gives me the message
where it says it's trying to communicate with this Internet-enabled
location. I don't want to have the user to have to change their
settings manually. Is there a way to allow the url of the
webservice so the user does not have to change their settings?
Thanks,
Tony

You can generally set a cross domain policy for these kinds
of things, but it gets trickier depending on what webservice you're
using. I'm having a similar problem with a java servlet.

Similar Messages

Flash security settings not coming up in Firefox 17.0

Hi I have been successfully running my web project on Firefox browser till now.
I am using adobe flash 11.5 version in my project and i am using the same for recording audio and video from webcam and the headsets.
Before today everything was working quite good ,until..
I updated my firefox browser to version 17.0 and found that my flash security settings just vanished in the thin air.
I mean my flash used to show security settings(if the settings are set to deny or ask me mode),but after the update of firefox 17.0 ,i am not getting any security settings windows from flash.
I am manually changing the settings using control panel.I cant ask my users to do this.
So please look into this and provide a fix as soon as possible.
Thanks

can we get a link to see for ourselves? Or paste the HTML
code up here (specifically that which embeds the flash in the
page)

Flash security settings panel

I am new to FlashPro CS5. I need to use it with SlideShowPro Director and the associated product 'ThumbGrid'.
I followed the instructions and settings from SlideShow Pro but nothing happens when I publish. They say I need to go to the flash security settings panel and add my local folder as a trusted location to execute the files from.
I cannot find the flash security settings panel. Can I get a hint on where to find the flash security settings panel. I need to add my local folder as a trusted location to execute the files from
Has anyone in the forum had experience with SlideShowPro Director or Thumb Grid.

Its okay continue with the thread, the next thing is about the crossdomain policy, you should also know about that for these kind of issues, let see with the following links:
http://www.designswan.com/archives/actionscript-30-flashs-security-sandbox.html
http://help.adobe.com/en_US/FlashPlatform/reference/actionscript/3/flash/system/Security.h tml?filter_flash=cs5&filter_flashplayer=10.2&filter_air=2.6
http://kb2.adobe.com/cps/142/tn_14213.html

You Tube Widget - Flash Security Settings

Hello,
I managed to embed sucessfully a You Tube video by using flash factor widget. It works when published to a web server no problem. However it looks like anybody else who views it has to adjust their flash security settings.
Is there away around this issue?
Help would be greatly appreciated
Thankyou
Alison

Hi all
One way past this would be to include and install a light web server known as "Server2Go". It's pretty simple to install and it tricks the Flash Player into thinking the content is running from a server.
Site to obtain Server2Go:
http://www.server2go-web.de/
Instructions for using it with Captivate:
http://forums.adobe.com/message/892584
Cheers... Rick
Helpful and Handy Links
Captivate Wish Form/Bug Reporting Form
Adobe Certified Captivate Training
SorcerStone Blog
Captivate eBooks

Unable to convert pdf to any other format. Tried cloud as well as acrobat reader. Reader error message "unable to contact service" and Cloud message "conversion error". I tried multiple pdf documents and checked security settings on all of them. Help Plea

nable to convert pdf to any other format. Tried cloud as well as acrobat reader. Reader error message "unable to contact service" and Cloud message "conversion error". I tried multiple pdf documents and checked security settings on all of them. Help Please!

Hi skydivingsnowman,
I'm sorry you're having such trouble using the ExportPDF service. What browser are you using?
Please try clearing your browser cache, or using a different browser (here's a list of supported browsers: http://www.adobe.com/acom/systemreqs/.
Please let me know if that works.
Best,
Sara

Flash Security Settings and Random Questions not Displaying

Hey folks,
I created a Captivate 4 project with 3 slides and a question pool of about 70 questions in which I am randomly pulling in. I am using IE7 and Flash 10. Publishing in Flash 10. If I publish or view in Preview in a web browser the project launches, plays the first 3 slides, and then goes blank when the first question should appear. Note: previewing the project AND publishing the project as an .exe does launch and display all the questions correctly. It ends up being a flash security issue. I went to the adobe site and via the Adobe Flash Player Security Manager" I entered in the main .SWF captivate-generated file as a trusted file and then re-ran the published captivate project and it ran correctly. Question is ... what do I need to do to set up flash or my project so I don't have to do this for every new project that I deploy? I don't want to have the users have to go in and add whatever I deploy as a trusted file. It's also a little confusing as to why the first three slides played and it stopped at the questions ... seems like if it's not a trusted file, that it wouldn't run at all.
Thanks for any help!
Chris

Hello again
I think I'd be investigating a temporary web server to host on until things are ready. Here's where it will help.
By providing files to the end users, if you are copying files over you end up having to explain how to save the files. You then have to walk them through setting the Flash Security so they can properly view. It all just becomes a pain in the kazoo.
If you can find some server space, you simply upload the content and provide a link for the users to view the content.
Other than that, if you are insistent that copying is the way to fly, I might suggest you establish a known location where you want everyone to copy their files. Perhaps C:\TestFolder. Then provide some instruction on how to configure the folder with the relaxed Flash Security. From there forward, anything they copy to the folder should need no security adjustment.
Cheers... Rick
Helpful and Handy Links
Captivate Wish Form/Bug Reporting Form
Adobe Certified Captivate Training
SorcerStone Blog
Captivate eBooks

Change Flash Security Settings With No Internet Access?

Hello
I have firefox at home with no internet access, is it posible
to alter my flash installation so it enables access to other
content. it brings up a settings window but that just goes to a
dead url.
I have a a collage disk but it will not run untill I alter
the settings of flash to allow acess to other site, other location?
Please help?

phil ashby wrote:
> Glad it worked!
>
> Urami, I did some fairly extensive tests with this idea
and it seemed to work
> each time - although all our corporate machines have the
same build. Even if
> the directory didn't exist, if you created it and placed
the SOL inside, it
> words. In the end I never actually used it as I
distributed the app as an exe
> which doesn't have such draconian security requirements,
also it obviously
> overwrites the users original version, if present.
I agree with you, I tried different SOL editor and it work
when i tried.
I believe what I used was more than SOL explorer/reader
rather then editor
even tho it has this option is seem the file stop working and
hence the
problem I was claiming about the files not work properly.
Perhaps it was changing something and flash did not like
these changes.
Anyhow, I did try another tool and did manage to work.
Thanks
> Personally, I think it's a bit of a hole in the whole
Flash security issue.
Won't comment on that one :) Something just seem way
unnecessary and silly...
Best Regards
Urami
!!!!!!! Merry Christmas !!!!!!!
Happy New Year
<urami>
If you want to mail me - DO NOT LAUGH AT MY ADDRESS
</urami>

Flash security settings - offline no internet connection

We have applications that are residing and a closed intranet with no access to the WWW period.
We are trying to use Xcelsius' WSDL connector to a WSDL residing on the intranet. This works fine, however when the SWF is opened in IE a default security prompt appears:
"Adobe Flash Player has stopped a potentially unsafe operation.
The following application on your.....
To let this application communicate with the Internet, click Settings..."
Since these machines have no access to the Internet, they cannot see the Macromedia Flash Website and thus are unable to modify their security settings, and thus the WSDL connection cannot work.
Does anyone have any resolutions available to allow web based data communications in Flash, without a WWW connection?
thank you

Hi Christine,
You can add a simple local configuration (.txt) file per machine to say which SWF or folder of SWFs is trusted without using the Adobe online Security tool.
Here is where to put the local configuration file for all users of the machine (note you may need to create the FlashPlayerTrust folder):
<system>\Macromed\Flash\FlashPlayerTrust
So that could be:
c:\WINDOWS\system32\Macromed\Flash\FlashPlayerTrust
Call the configuration txt file whatever you want (just make sure it has a .txt extension).
Create the configuration file (Notepad will do), save the file (for example: xcelsius.txt).
To make any SWF that runs from the C or D drive on the machine trusted add these two lines to the txt file then save it:
C:\
D:\
Run a SWF from the C or D drive and it should now be trusted.
This information is from this section FlashPlayerTrust configuration files on this Adobe site: http://www.adobe.com/devnet/flash/articles/fplayer8_security_04.html
Regards,
Matt

Change Flash Security Settings? Security Manager Offline?

Hello
I have downloaded firefox and flash player, I have content
which when I run it, flash blocks it wisely and reports that the
page is trying to access other content etc.
I need to allow the accessing to other content but I dont
have internet at home, I understand I need the global manager
security settings panel which of course shows fine on this intenet
conencted machine but at home it just brings up a dead URL because
of no tcp/adsl etc.
I am sure this is a standard question answered millions of
times before Im sorry to bother you guys, Have a great year every
one and good luck Adobe.

The reason you can't access it offline is because adobe flash
player is effectively a trojan. There is absolutely no reason to
not have local, offline access to adjust settings to a local piece
of software, even if it is a plug-in. That goes to the heart of it
right there. The settings are stored locally, so what the hell is
the GSM doing? Well, it's doing what it specifically says it is not
going to do (on the GSM page) and modifies personal data on your
system. These settings may be benign but the method employed is
typical virus behavior. Adobe has never given a reason because they
know they have a front door into everyone's machine that made the
mistake of installing the flash player plug-in. Even microsoft had
a big deal about it because they put it in the WinXP install and
sure enough, flash player had a huge security hole. They knew it
and did nothing. Adobe knew it and didn't care.
You might look for a hack that modifies the settings locally
rather than relying on a known virus-type of access that adobe
clearly wants to your system.
Adobe should be set on fire for this kind of behavior.
btw:
check out this file: (it'll be on your local machine)
\documents and settings\(your username)\application
data\macromedia\flash
player\macromedia.com\support\flashplayer\sys\
and the file is
settings.sol (it's a binary file)
SWF should never be allowed to modify anything, it's supposed
to play animations, yet adobe's ocx (the plug-in) seems to do just
that without any notification or warning that it's going to do
something to your local system. Again, this is classic virus
behavior; performing some unwanted/unwarranted task(s) without
notice. I've play with the flash maker before, I remember you could
do some things with clickable links. But nowhere do I recall it
giving the ability to modify someones local files, that was just
too much freedom.
adobe needs to either fix this or drop flash player. I know
it's fairly prevalent on the web, but with security risks like
these that adobe doesn't want to fix it's just dynamite. Better
yet, how about make our flash swf files able to access adobes'
internal network? Sounds fair to me.
You'll also probably see a bunch (or just a few or even none)
of directories that start with # in the ...\sys directory. Under
which each one may have another settings.sol file. If you do a
little research on the web you can find a ton of people who've had
security holes opened because of entries in these files. adobe may
want to deny it but you can read about it all over the place. adobe
flash player has even been at issue with rootkits (look them up,
quite nasty) and the problems that go with them. So yeah, adobe
reached a new low the first time I saw that.
It's crap software like this that gets unleashed on the
unsuspecting public and techs like myself have to clean it up.
Furthermore, we have to try and find alternatives to what has
become too well-established. Flash became popular before people
really paid any attention to what adobe was actually doing on their
systems. That's why everytime I have to uncorrupt a system I go
looking for things like the flash player plugin. Some days it's so
bad I'd like to see a plane hit the adobe hq, that'd be some
justice.
If only companies like adobe would release trustworthy
software, yeah, I'm still looking for the pigs with wings.
And yet still more bs: while almost every piece of software
I've ever installed goes into it's own directory or under
..\program files\... look where adobe puts itself. Deep inside
...\Windows\...
Here's where I found mine
C:\WINDOWS\system32\Macromed\
with several different directories under there. Like a damn
tick it burrowed itself into the main windows directory. Which is
also typical of a virus.

Java WebDynpro's and IE security settings for file download

We have a EP 7.0 SP13 environment on which we have deployed a number of own developed java webdynpro's. In some of these webdynpro's we provide the file download functionality. The portal and webdynpro's are used by both internal personnel and external customers.
On the other hand the default Internet security settings for Internet Explorer, disable "Automatic prompting for file downloads".
When a user, with these default security settings active, tries to use our webdynpro's file download functionality, the screen seems to refreshes but no file download starts. When (s)he retries, the session runs for some minutes and gives following error message:
"com.sap.tc.webdynpro.services.session.LockException: Thread SAPEngine_Application_Thread[impl:3]_20 failed to acquire exclusive lock on client session ClientSession".
This behavior is explained in SAPNote 1234847. Webdynpro provides a single-thread module, meaning a user session is blocked for the during of the request. And because the previous file download isn't yet completed the new try can't start.
Issue now, although the users IE settings allow file downloads and don't block pop up's, he can't download the file and even isn't made aware of the cause of the failure.
How can we avoid this issue, without having to communicate the
application requires specific browser settings?

Welcome to the Apple Support Communities
See > http://support.apple.com/kb/HT5290
You can install the program using different ways:
1. Right-click the application installer and choose Open.
2. Go to System Preferences > Security and Privacy and select Anywhere in Allow applications downloaded from

Flash security settings in javascript

hello all - (newbie here)
is there a way i can read the flash player camera/microphone security settings from javascript?
i need to be able to determine from jscript if somebody selected "allow" or "deny" for the camera/microphone.
also, is there a way in jscript i can determine when somebody hits the "close" button in the security question popup?
i am playing around with the html object-map-coords tags but that does not seem to be working.
or even better: can i determine via javascript when somebody hits the "close" button after answering the security questions?
NOTE: i dont have any access to the action-script.
thank you!

I don't kknow of any easy/automatic way to do it, but It can
be faked...
You can put the javascript on the html page calling on the
flash file. Inside the flash file use a preloader to determine when
the page is fully loaded. Then instead of just playing the movie
put in a
getURL("javascript:name();");
function to call the javascript once the page is fully
loaded.
This will do what you want. However thanks to new flash
security it probably will not work until you publish the file to a
server. There may be an easier way but I don't know it.

WebDynpro development vs. ports and IE security settings?

Hi!
We have Sapgui running in a Citrix server and its hosted there for multiple developers. The backend they access is SRM where they need to do WebDynpro development work.
Problem is that when going to the WebDynpro editor screen and choosing the layout tab they can see only a blank page!
What are the requirements for the WebDynpro development workbench in terms of:
- Ports required open between the Citrix host machine and SAP server? We have already opened ports 32nn and 80nn.
- Internet Explorer settings that should be looked at? Security settings that must be enabled?
- Any other settings in host or client side that needs to be checked?
Thanks in advance!
.Ossi

Hi,
f12>Networking tab, click the start button then refresh the page to view request/response timings.
http://nancyjoart.com/api/art/ThumbImage/fb958270-8c20-46e9-9adf-05ef6990ec85/250
Key Value
Response HTTP/1.1 200 OK
Cache-Control public, max-age=36000, s-maxage=36000
Transfer-Encoding chunked
Content-Type text/html
Server Microsoft-IIS/8.0
X-AspNet-Version 4.0.30319
X-Powered-By ASP.NET
Date Wed, 20 Aug 2014 02:34:12 GMT
you are sending back the wrong mime-type + it appears that you are not using response.close after streaming back the image in your asp.net code behind.
Open a new window in IE... copy and paste
http://nancyjoart.com/api/art/ThumbImage/fb958270-8c20-46e9-9adf-05ef6990ec85/250
in the address bar... the image loads but the document.readyState does not reach loaded. there is no EOF in the response body and it is served as text/html not image/jpg.
ensure Internet Options>Security tab, click "Reset all zones to default"... (IE has security settings for mime types) and also that Tracking Protection is turned off for the site (Tools>Tracking protection)
+ the defer attribute on the <script> tag only applies to script tags with a src attribute... validate and correct your markup errors at validator.w3.org.
Post questions about html, css and scripting to the IE Web Development forum. Include with your question a link to your website or a mashup that shows the issue.
Questions regarding Internet Explorer 8, 9 and 10 and Internet Explorer 11 for the IT Pro Audience. Topics covered are: Installation, Deployment, Configuration, Security, Group Policy, Management questions. If you are a consumer looking for answers or to
raise a question, it's highly recommended you head on over to http://answers.microsoft.com
Rob^_^

Manually editting Flash security settings

I work in a small network that does not have internet access.
Flash prevents me from running any lessons from the LAN as it wants
to point to adobe.com (which it cant). is there anyway i can access
the file, that already resides on my machine, without having to go
thru adobe.com ?? i found the file (settings.sol) but can't edit it
using wordpad or notepad. i tried and it didn't work. i can't take
an existing file and replace this one for a few reasons nor can i
copy the lesson down to my HD and run it from there. any advice
here would be great.

I found your wording to be a bit hard to follow poppabear...
it wasn't clear why Flash Player wanted to hit adobe.com.
I think what you're looking for is a way to control Flash
Player Settings Manager without having to connect to it. Common
question (which I answered in another post today already). You can
do that by distributing an MMS.CFG file on your local machines.
You can learn more about that here:
http://www.adobe.com/devnet/flashplayer/articles/flash_player_9_security.pdf

Actionscript 2 and Flash Publish Settings

Hi Everyone,
I have posted a couple questions as of late and received fantastic support from other members (Thanks K-Glad).
I do have what I'm assuming to be a basic question however I cannot find an answer for it.
I added some login script to a page as listed below.
stop();
eval("$version");
appname="mikesapp"
loadVariablesNum("http://bars.bevinco.com/mike/newlogin.php", 0, "POST");
//This verifys the users status and forwards them to the portion of the website they are authorized to access. Frame 100 = Regional Access, Frame 200 = Franchise Access, Frame 300 = Employee Access and Frame 400 = Denied Access and Back Button
this.onEnterFrame = function () {
    if(_root.checklog == 100){
        _root.gotoAndStop(5);
    if(_root.checklog == 200){
        _root.gotoAndStop(10);
    if(_root.checklog == 300){
        _root.gotoAndStop(15);
    if(_root.checklog == 999){
        _root.gotoAndStop(20);
My Question
When testing this movie, I found that it was not moving to the section of the flash file that is relative to their "authorization level". I.E. I manually had my PHP echo back to flash, advising that REGIONAL ACCESS was used therefore it should be move this user to FRAME 5 of the file.
I found that it was staying stuck on the first frame and not moving beyond the 1st frame which I thought had something to do with the stop(); that is listed at the top of the actionscript.
However, when I changed the FLASH PUBLISH settings from Flash Player 8 to Flash Player 6, it works flawlessly.
I attempted to publish using Flash 7 however it appears FLASH 6 is as high as I can go without loosing it's functionality.
I'm curious WHY and will this limit our users from using the site if they have a lower version of Flash installed on their CPU?
I have attached the project FLA file and the PHP file, being used on the server to manually tell this file that a REGIONAL has signed in or someone with "100" level status.
As always, thanks in advance to anyone that has taken the time to read this post.
Cheers,
Mike

checklog is a string (even though it looks like a number to you). flash 6 allowed quite a bit more code sloppiness than later versions. so, it's very common for users to find publishing for fp6 works, while publishing for fp's higher breaks their code.
you should use:
this.onEnterFrame = function () {
    if(_root.checklog == "100"){
delete this.onEnterFrame
        _root.gotoAndStop(5);
    if(_root.checklog == "200"){
delete this.onEnterFrame
        _root.gotoAndStop(10);
    if(_root.checklog == "300"){
delete this.onEnterFrame
        _root.gotoAndStop(15);
    if(_root.checklog == "999"){
delete this.onEnterFrame
        _root.gotoAndStop(20);

Webservices and adobe security enhancement

Hello,
I've created a dataConnection to a webservice where the form data is sent and i have my security option at Adobe Reader 9.4.2 enabled. Every time i invoke the webservice for the first time the trust information appears and an exception is thrown informing the user to check the option "trust this document...".
At this place everything is understandable, but next, when i check my server/DataBase, the data was already been stored, despite the fact of security warning.
Could someone explain me why this happens?

hi there,
I have the same issue. the yellow bar pops up and user says "trust this document" but webservice is called.
could you find any solution for this until now? any workarounds?
I though maybe I can force the yellow pop up at the beginning and after that the button can be enabled for the user. but I couldn't do it either
thanks,
koray

Webservice and Flash Security Settings

Similar Messages

Maybe you are looking for