Comments on: Death of open crossdomain.xml’s? (Flickr, Youtube,…) http://renaun.com/blog/2006/12/13/167/ Informtation on Flex, Flash, ColdFusion, and general RIA web develoment. Thu, 28 Aug 2008 20:43:20 +0000 http://wordpress.org/?v=2.5.1 By: Mrs. Weasley http://renaun.com/blog/2006/12/13/167/#comment-156678 Mrs. Weasley Mon, 30 Nov 2009 00:00:00 +0000 http://renaun.com/blog/2006/12/13/167/#comment-156678 Any news on Salesforce's crossdomain.xml now that they have their Flex Toolkit? Seems like the toolkit should handle the communications between my app and salesforce.com, and I didn't notice anything about using a proxy in the online code samples from Salesforce. Any news on Salesforce’s crossdomain.xml now that they have their Flex Toolkit? Seems like the toolkit should handle the communications between my app and salesforce.com, and I didn’t notice anything about using a proxy in the online code samples from Salesforce.

]]> By: Abrupt YouTube security policy change « FLEXing My Muscle http://renaun.com/blog/2006/12/13/167/#comment-43471 Abrupt YouTube security policy change « FLEXing My Muscle Tue, 30 Nov 2010 00:00:00 +0000 http://renaun.com/blog/2006/12/13/167/#comment-43471 [...] It seems Flickr did it too… seems like Death of open crossdomain.xmls. Read the post by Renaun Erickson [...] [...] It seems Flickr did it too… seems like Death of open crossdomain.xmls. Read the post by Renaun Erickson [...]

]]> By: Renaun Erickson http://renaun.com/blog/2006/12/13/167/#comment-27855 Renaun Erickson Tue, 30 Nov 2010 00:00:00 +0000 http://renaun.com/blog/2006/12/13/167/#comment-27855 Not sure what you asking here... are you saying you can't access the flickr pictures directly in Flash/Flex without a crossdomain.xml? Not sure what you asking here… are you saying you can’t access the flickr pictures directly in Flash/Flex without a crossdomain.xml?

]]> By: Eric cancil http://renaun.com/blog/2006/12/13/167/#comment-27854 Eric cancil Tue, 30 Nov 2010 00:00:00 +0000 http://renaun.com/blog/2006/12/13/167/#comment-27854 Ok, maybe I'm not totally grasping this. It's fine that we can access the API without any sandbox violations, but we can't access the actual pictures without one, doesnt this defeat the purpose? -Eric Ok, maybe I’m not totally grasping this. It’s fine that we can access the API without any sandbox violations, but we can’t access the actual pictures without one, doesnt this defeat the purpose?
-Eric

]]> By: joeberkovitz.com » Abrupt YouTube security policy change http://renaun.com/blog/2006/12/13/167/#comment-12760 joeberkovitz.com » Abrupt YouTube security policy change Fri, 30 Nov 2001 00:00:00 +0000 http://renaun.com/blog/2006/12/13/167/#comment-12760 [...] Death of open crossdomain.xml’s? [...] [...] Death of open crossdomain.xml’s? [...]

]]> By: Renaun Erickson http://renaun.com/blog/2006/12/13/167/#comment-12756 Renaun Erickson Thu, 30 Nov 2000 00:00:00 +0000 http://renaun.com/blog/2006/12/13/167/#comment-12756 I agree, the documentation should not just be Adobe, but also developer documentation from each service. Granted they will not want to talk about security risks in great detail. But general security guidelines in regard to each services specific implementation would be great to see from the services themselves. I agree, the documentation should not just be Adobe, but also developer documentation from each service. Granted they will not want to talk about security risks in great detail. But general security guidelines in regard to each services specific implementation would be great to see from the services themselves.

]]> By: John Dowdell http://renaun.com/blog/2006/12/13/167/#comment-12754 John Dowdell Thu, 30 Nov 2000 00:00:00 +0000 http://renaun.com/blog/2006/12/13/167/#comment-12754 I just heard through internal email that there's already more documentation in the pipeline for these types of issues. Probably won't get final reviews and live push until after the holidays, though. It still would be good if Flickr and YouTube spoke for themselves on this issue, though. jd I just heard through internal email that there’s already more documentation in the pipeline for these types of issues. Probably won’t get final reviews and live push until after the holidays, though.

It still would be good if Flickr and YouTube spoke for themselves on this issue, though.

jd

]]> By: Crossdomain.xml revisted at Aral Balkan http://renaun.com/blog/2006/12/13/167/#comment-12689 Crossdomain.xml revisted at Aral Balkan Sat, 30 Nov 2002 00:00:00 +0000 http://renaun.com/blog/2006/12/13/167/#comment-12689 [...] This is a great summary of the security concerns regarding crossdomain.xml files. There’s been a lot of talk recently about crossdomain.xml, following John Dowdell’s post regarding the change in policy at YouTube. [...] [...] This is a great summary of the security concerns regarding crossdomain.xml files. There’s been a lot of talk recently about crossdomain.xml, following John Dowdell’s post regarding the change in policy at YouTube. [...]

]]> By: Chris Allen http://renaun.com/blog/2006/12/13/167/#comment-12633 Chris Allen Sun, 30 Nov 2003 00:00:00 +0000 http://renaun.com/blog/2006/12/13/167/#comment-12633 James, I would also like to see a more concise document on the Flash security model created. In addition, there doesn't seem to be too much out there about the security model when using a projector. This is something that we have been struggling a bit with at my current job. James, I would also like to see a more concise document on the Flash security model created. In addition, there doesn’t seem to be too much out there about the security model when using a projector. This is something that we have been struggling a bit with at my current job.

]]> By: Evert http://renaun.com/blog/2006/12/13/167/#comment-12632 Evert Sun, 30 Nov 2003 00:00:00 +0000 http://renaun.com/blog/2006/12/13/167/#comment-12632 James, Currently the flashplayer also accepts crossdomain policy files embedded in HTML or even GIF files.. read this: http://www.hardened-php.net/library/poking_new_holes_with_flash_crossdomain_policy_files.html James,

Currently the flashplayer also accepts crossdomain policy files embedded in HTML or even GIF files.. read this:

http://www.hardened-php.net/library/poking_new_holes_with_flash_crossdomain_policy_files.html

]]>