Wednesday, March 26, 2008

Flash Player security update coming...

If you're using Flash or Flex, then you should be aware of an upcoming update to the Flash player that Adobe says will prevent Flash player apps being used to launch attacks against consumers, but could also break some apps.

Adobe's own announcement says that if the following situations apply to your Flash/Flex app then you might be impacted:

  1. You use sockets or XMLSockets, regardless of the domain to which you are connecting

  2. You use addRequestHeader or URLRequest.requestHeaders in any network API call when sending or loading data cross-domain

    OR

  3. You provide access to content on remote domains as a web service provider

  4. You have SWFs that are exported for Flash Player 7 (SWF7) or earlier that communicate with the hosting HTML by any means

  5. You use "javascript:" through network APIs to communicate outside a SWF


You can read the article in detail here.

0 Comments:

Post a Comment

<< Home