Flex Mobile + crossdomain.xml

Similar Questions

• FileReference - crossdomain.xml - restrict access to all MY Flex application?

  I have a Flex application based on the web (domain A) concerning must download files on the desktop of the user FROM an external server (domain B). I use Adobe FileReference class to do this. Now, I know that I need a file crossdomain.xml to the external server in domain B to establish trust between the Flex application and the server download. In the end, I need any user to any domain to have access on the server download for the cross-domain file must specify:

  allow-access-from domain="*"
  
  But this will open up acess to the downloadble files to any flex app out there on the web . Is there a way to restrict access to just MY Flex app in the
  crossdomain.xml file?
  
  thx in advance!
  
  -MC

  Why do you need any user to any domain access?

  Anyone using your web application will be in area a. unless you count should the swf for others to download from their servers (which woiuld be strange)

  the field is the place where its hosted

• Flex [mobile] iOS app refuses to connect to a self-signed SSL server: error 2032. Ring the bells?

  Hello everyone, thank you for reading this and I hope you could help me with this problem.

  I'll cut to the Chase. I am currently working on a mobile app in Flex for Android and iOS and the app has to get a few HTTP requests and retrieve information from a server, which is currently developing a teammate.

  Everything had to be working very well until we decided a few days before when we have integrated a SSL self-signed certificate in order to make connections more secure, etc.

  On the side of the app, this change, lying just to replace the http with https url and it seems to work perfectly, or that's what we thought.

  Tests on the Simulator or on an Android device worked well, he just showed the warning provided access to a server that had a rogue certificate that could be ignored without any problem. But when we tried to test a Release on a camera of the iPhone version, it would not just work more. A connection every time trying to be established with the server, error 2032 flash is triggered and it fails miserably does not display not warning about certificates not approved at all. For me, it's really confusing that it works on Android devices, but not on the iPhone device.

  I searched on the Web for people having the same problem but I couldn't find an answer to this specific issue of Flex-iOS-Self-signature-SSL. I found this post unanswered questions: http://forums.adobe.com/message/3359072#3359072 but nothing much.

  I tried to create a crossdomain.xml file on the server with guaranteed set to false, and some other stuff to avoid crossdomain policies, but it changed nothing and the problem persists.

  I'm really out of clues, sort of desperate and have no idea how fix it. If anyone knows something related to this problem, please, help me, I'll be less grateful.

  Thank you!

  We decided to buy a verified SSL certificate, and it worked. We can say that the problem is solved, but it wasn't actually because the connection must be established and that the invited user to accept or decline the self-signed certificate, not only do not make the connection.

• HTTPService to localhost does not work in Flex4... Even with crossdomain.xml

  So, it worked before I recompiled with Flex4, (in Flex 3.5) and now I can't get the following to work...

  History:

  I use httpservice in flex as:

  "" < mx:HTTPService id = "methods" url = "http://localhost/parser.php"method = "POST" showBusyCursor = "true" resultFormat = "e4x" result ="xmlresultHandler (event)" fault = "faultHandler (event)" / > "

  Everything is in my directory on my web server. When run in debugging or directly from flashbuilder, the call works fine. If I ran a release build, FTP in/var/www rejection (my roots) and try to access the server, the site pulls upward, and the series of swf files, but I always get a

  Fault: Channel .Security .error

  FaultString: 'error of security to access the url.

  faultDetail: ' Destination: DefaultHTTP.

  When it tries to read the httpservice.

  I have a crossdomain.xml file in my folder/var/www (webroot) with what I see as a permissive super settings... Below:

  <? XML version = "1.0"? >
  <! DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd" > ""
  < cross-domain-policy >
  "< allow-access-from domain =" "*" ports = "*" / >
  < site permitted-cross-domain-policies of control = 'all' / >
  "< allow-http-request-headers-from domain =" "*" headers = "*" / >
  < / cross-domain-policy >

  Any help would be GREATLY appreciated.

  You may need to set the - use-network = false compiler option.

  Project - Properties - Flex Compiler

  Add the option - use-network = false for the ' additional compiler arguments: "section.

  When deploying on a live server, you probably need to recompile it with the option - use-network = true.

  Who knows, maybe in your situation, it must be set to true.

  If this post answers your question or assistance, please mark it as such.

  Greg Lafrance - Flex 2 and 3 certified ACE

  www.ChikaraDev.com

  Training Flex and Support Services

• Domain name in the crossdomain.xml file

  Hello

  I have a Flex application that accesses data from an external system that is hosted by a 3rd party. We want to maintain a crossdomain.xml on this system, but not sure what should be the name of the system.

  We have 3 out of the intellectual property and in the file corssdomain should be the outgoing our IP domain or IP address from our local server on which flex is running, or both.

  Please give me advice.

  Thank you

  Colinet

  It should be everything that can appear after http:// in the URL for sovereign wealth funds

  Alex Harui

  Flex SDK Developer

  Adobe Systems Inc..

  Blog: http://blogs.adobe.com/aharui

• Problem crossdomain.xml

  Good afternoon

  I have a web app in flex 3 which, on a server "http://SRV-XXX:8181/relflex/main.html" and in the application, I reached by HTTPService " http://SRV-XXX:8181/SL_SISFLEX/slSRV05"(my Servlets).
  When you access the site with 'http://SRV-XXX:8181/relflex/main.html' works normally, but when I "http://172.1.0.6:8181/relflex/main.html" does not work and error # 2048

  (mx.messaging.messages: errorMessage) # 0
  body = (null)
  clientId = "DirectHTTPChannel0".
  correlationId = "0D499AD7-FE29-95E7-9B5A-B2062705750F."
  destination = «»
  extendedData = (null)
  faultCode = "Channel.Security.Error".
  faultDetail = "Destination: DefaultHTTP.
  faultString = "error of security to access the url.
  headers = (Object) # 1
  DSStatusCode = 0
  MessageId = "F4BCF095-DD0B-8739-5057-B2062734F478."
  rootCause = (flash.events: SecurityErrorEvent) # 2
  bubbles = false
  cancelable = false
  currentTarget = (flash.net: URLLoader) # 3
  bytesLoaded = 0
  bytesTotal = 0
  data = (null)
  dataFormat = "text".
  eventPhase = 2
  target = (flash.net: URLLoader) # 3
  Text = "error # 2048: Violation of the safe area: http://172.1.0.6:8181/relflex/main.swf cannot load data from http://SRV-XXX:8181/SL_SISFLEX/slSRVXXX? db = relflex & parameterDataSource = % S 5FPOD USP.»
  Type = "securityError".
  timestamp = 0
  timeToLive = 0

  I try to use the link in the crossdomain.xml as http://SRV-XXX:8181/relflex/crossdomain.xml:

  <? XML version = "1.0"? >
  <! DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd" > ""
  < cross-domain-policy >
  < site-control permit-cross_domain-policing = 'all' / >
  < allow-access-from domain = "" * "ports =" * "/ >"
  < allow-access-from domain = "srv - XXX" ports = "8181" / >
  < allow-access-from domain = "172.1.0.6" to-ports = "8181" / >
  < / cross-domain-policy >

  And in the application I'm call-> flash.system.Security.loadPolicyFile ("http://SRV-XXX:8181/relflex/crossdomain.xml");

  You can help me to solve the problem of the call of 172.1.0.6:8181 and SRV - XXX:8181?

  TKS!

  Paulo David

  If you can, try the default configuration where you put the crossdomain.xml file in the root and not the relflex subfolder.

  Alex Harui

  Flex SDK Developer

  Adobe Systems Inc..

  Blog: http://blogs.adobe.com/aharui

• Just crossdomain.XML doesn't work do not

  Hello
  
  I have move my request to my Local computer problems to a development/TEST server for testing. My application uses c# Web Services to access data and a Flex front-end.
  
  Here is the error I get (only on the development/TEST server):
  
  An error occurred communicating with the server.
  Error message: HTTP request error
  Faul Code is: Server.Error.Request
  Lack of detail is: error: [IOErrorEvent type = "ioError" bubbles = false cancelable = false eventPhase = 2 text = "Error #2032: stream error."] "URL: http://DOMAIN/APPLICATION/WebService.asmx" URL: WebService.asmx
  
  Exactly the same configuration works on my local machine. I have a crossdomain.xml in place file that looks like this:
  
  <? XML version = "1.0"? >
  <! DOCTYPE cross-domain-policy (View Source for full doctype...) >
  -cross-domain-policy >
  < site permitted-cross-domain-policies of control = 'all' / >
  < allow-access-from domain = "' * ' course ="fase"/ >"
  "< allow-http-request-headers-from domain =" "*" headers = "*" course = "fase" / >
  < / cross-domain-policy >
  
  However, I don't think the crossdomain is actually necessary, because there is demand on the same domain and directory as the webServices. But, I added one anyway, because every google search seems to say that the HTTP request error: Server.Error.Request is a problem of crossdomain.xml.
  
  Little, I thought it might be a permission error. However, I have the web page, run as an 'application' and user account for the application has permissions to the root directory and all it's children files/directories (so he can read the crossdomain.xml) and also the identity of the application has access to run all selects them.
  
  Unfortunately I am running this on IIS6 on the machine of dev/TEST and IIS7 on my local machine. So I can't set up the failed request tracking to see if I can find the problem there.
  
  Does anyone have any help that they can share? I spent the full day try everything I can think of to make it work with no will.
  
  Any help would be greatly appreciated!
  
  Thank you!!
  -Mike

  It turns out that the problem was that the Application Pool identity did not have access to the SQL DB do CRUD. I guess you should never be too sure of things. -= o /

• I need a crossdomain.xml file?

  I worked on my first Flex application, and he designed several structures menu based on data coming from external XML files. Everything works correctly when you run the project in Flex Builder, but when I move the build directory (/ bin) to another location, it does not load my menus. I have discovered it is because of the configuration of security projects build directory gets and to get my files to work elsewhere, I'll need a crossdomain.xml file.
  
  After reviewing the operation of the crossdomain.xml files I wonder if in my case I should even need one because the files load my SWF will be already placed on the local machine - not a server. Yet, the application does not work so I tried a crossdomain.xml even when using the following code:
  
  
  <? XML version = "1.0"? >
  <! DOCTYPE cross-domain-policy SYSTEM " http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd" >
  
  < cross-domain-policy >
  < allow-access-from domain = "192.168. * "safe ="false"/ >".
  < / cross-domain-policy >
  
  

• Native UI in Flex Mobile Application action bar

  Hi all

  I managed to port sample WeatherGuesser of FDT Mobile AS Application and market.

  But how to do so that the port in Flex Mobile application.

  I would use native look of the action bar, back and all that.

  are there opportunities to achieve.

  Thank you

  Vedran

  Any QNX control should be wrapped in a Flex control that you want to include in the MXML. It works well as a control of AS3.

• Any suggestion for the option of compiling the Flex Mobile of the project in Flash builder (Blackberry platform)

  I use Flex mobile project type to create a stand-alone for targeting blackberry and android application both versions.

  Depending on the configuration of my test application works ok in blackberry tablet Simulator. As I am new to blackberry AIR application development if anyone can help me for the compilation of project I currently put for my application is good or not?

  When I checked the project-> properties-> Flex compiler, I found "Flex Hero" as compilation same SDK, so I'm trying to pass the value of the configuration option available, that it won't allow me to set the 'Blackberry Tablet OS SDK 0.9.1 for Adobe AIR"- any suggestions?

  The question above, see attached screenshot.

  

  Hey Dounibiligda,

  He was right to what you saw originally in your settings. the default SDK should be the flex SDK Hero. If you want to add libraries specific blackberry, you must manually import the qnx - screen.swc which will give you most of the libraries QNX which are skinned to resemble the appearance of the standard playbook.

  so to summarize, keep the default Flex Hero sdk and manually import the qnx - screen.swc to your project. Good luck!

• universal support iOS and CSA 2.0. It will affect Flex Mobile projects?

  Hello

  Regarding the latest release notes for AIR 16, it says

  "The legacy compiler is not (and will not) compatible with iOS 64-bit." [...] It will be removed with the 16 of the AIR SDK version"

  I'm a little lost with what it means for Flex Mobile (4.6 or Apache Flex SDK). We will always be able to compile once AIR 16 is released or this new compiler will be the issue with Flex compiled for iOS projects? Must make us changes on existing applications in Flex?

  Thanks for your clarification,

  Fabien

  It seems that this evil is rumor spreading around... a lot of people don't bother research properly.

  When they talk about the legacy compiler, they speak of the ADT, MXMLC will continue to work. Simplified IPA packaging process is: Source code - MXMLC / ASC2---> SWF - ADT AOT compiler---> IPA

  So with AIR 16 ADT -useLegacyAOT argument is removed.

• How to insert a background image in VGroup in Flex Mobile

  I want to insert a background image for the VGroup. Help out me. I'm new to Flex!

  I use this code in the Flex Mobile Application *.

  < s:VGroup height = "100%" width = "100%".

  paddingTop = "10" paddingBottom = "10" paddingLeft = "10" paddingRight = "10" >

  < s:List id = "homeList" height = "100%".

  labelField = "title".

  dataProvider = "{Homearticles}" >

  < s:layout >

  < s:TileLayout requestedColumnCount = '1 '.

  verticalGap = "5" / >

  < / s:layout >

  < s:itemRenderer >

  < fx:Component >

  < s:ItemRenderer >

  < s:VGroup >

  < s:BitmapImage source = "{data.source}" / >

  < s:Label text = "{data.title}" / > "

  < / s:VGroup >

  < / s:ItemRenderer >

  < / fx:Component >

  < / s:itemRenderer >

  < / s:List >

  < / s:VGroup >

  I don't think that you can add a background image to a VGroup directly, or VGroup can be skinned.

  As much as I know there are probably 2 solutions

  (1) use a SkinnableContainer skin rather the container to have a background image and set its layout to VerticalLayout

  (2) place the VGroup one group with a BasicLayout. You can then add a background image for the Group and the overlay VGroup

• Crossdomain.XML Flash attack is still possible?

  In my business, we have some security issues related to the injection of code on our websites (XSS).

  I would like to know if a simiar to http://code.google.com/p/doctype-mirror/wiki/ArticleFlashSecurityPolicyAttack attack is always possible.

  I have a few issues this topic:

  1. the policy domain (crossdomain.xml) always files analyzed forgivingly by Flash, or was it more strict approach implemented since the publication of the article?

  2. How will I know if a policy file is valid or not, especially if it's injected a wrong xml or html, or image file?

  3. the important HTTP headers when Flash Player checks if downloaded, cross-domain policy files are valid?

  Thank you in advance,

  Mariusz Lewandowski

  Hi Mariusz,

  The information contained in the article that you referenced are really, really old.  While the article was published in 2011, the problems described around rigorous political file have been set back to 2007/2008.  Gradually, we have made a number of changes to address all of the issues between Flash Player 9 and Flash Player 10.

  There is a good overview of the changes here:

  http://www.Adobe.com/devnet/flashplayer/articles/fplayer9-10_security.html

  A comprehensive guide to the use of cross-domain securely in the Flash Player 10 Security white paper policy files can be found here:

  http://www.Adobe.com/devnet/flashplayer/articles/flash_player10_security_wp.html

  Finally, the Adobe Secure Software Engineering Team (ASSET) has published a guide on the deployment in any security policy files that you might find useful:

  http://blogs.Adobe.com/asset/2009/11/securely_deploying_cross-domai.html

  Please let me know if you have other questions or concerns.

  Thank you
  Henry Clark

  Quality engineering - Runtime Flash security manager

• What is Crossdomain.xml

  Can someone tell me what's the use of crossdomain.xml? And how does it work? Where there should be the crossdomain.xml file is placed in the client side or the remote access server?

  If you have a Flash movie in a field on a single server, you cannot access data on another domain. It is a safety precaution. In order to use the data from another domain, you must allow other data to share including a crossdomain.xml file in the second field. This crossdomain.xml file tells the flash player that the data from that second domain is OK to use.

  There are a number of scenarios, explained in the first document that I listed above. You have a situation that is different from all these examples?

• What does "REQUEST_URI = crossdomain.xml" mean?

  When my site receives a 404 error I sent it to me. I see this a lot sometimes...

  'REDIRECT_URL = crossdomain.xml.

  (see below for the code). What it means? I know it has to do with the Flash in some way.

  HTTP_REFERER = desktop.htm

  HTTP_USER_AGENT = Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.4 (KHTML, like Gecko) Safari/537.4 Chrome/22.0.1229.94

  LAST_MODIFIED =

  PATH = / bin: / bin

  QUERY_STRING =

  REDIRECT_STATUS = 404

  REDIRECT_URL = crossdomain.xml

  Flash requires a cross-domain policy file. Cross-domain policy files allow to control the types of resources and requests Flash Player can do when you talk to your server.

  You can read more details on the different policy files that obeys Flash Player here:

  http://www.Adobe.com/devnet/flashplayer/articles/flash_player10_security_wp.html