[osflash] LoadVars Security Bug with FP9 ?

[Nicolas Cannasse]

> Hi,
> 
> We experienced some problems when using FP9 instead of FP8 for reading a
> SWF built with Flash8 on one of our website.
> 
> We have one SWF that is loaded in a subdomain :
> http://data.domain.com
> 
> It calls the www domain using LoadVars.load, which works well. However
> with FP9 both LoadVars.send and getURL fail to redirect on the www domain.
> 
> This is a big problem since it means installing FP9 is breaking backward
>  compatibility with Flash 8 content.
> 
> Any clue ?
> 
> Nicolas

For the record, we found that changing allowScriptAccess from 
"sameDomain" to "always" fixes the problem. This is however still a big 
issue since it breaks backward compatibility for existing SWF...

Nicolas