[osflash] LoadVars Security Bug with FP9 ?
ncannasse at motion-twin.com
Thu Jul 13 02:27:51 EDT 2006
> We experienced some problems when using FP9 instead of FP8 for reading a
> SWF built with Flash8 on one of our website.
> We have one SWF that is loaded in a subdomain :
> It calls the www domain using LoadVars.load, which works well. However
> with FP9 both LoadVars.send and getURL fail to redirect on the www domain.
> This is a big problem since it means installing FP9 is breaking backward
> compatibility with Flash 8 content.
> Any clue ?
For the record, we found that changing allowScriptAccess from
"sameDomain" to "always" fixes the problem. This is however still a big
issue since it breaks backward compatibility for existing SWF...
More information about the osflash