1058 ActionScript classes
Version-specific differences
Flash Player's cross-domain security rules have evolved from
version to version. The following table summarizes the differences.
The versions that control the behavior of Flash Player are
SWF versions
(the published version
of a SWF file), not the version of Flash Player itself. For example, when Flash Player 8 is
playing a SWF file published for version 7, it applies behavior that is consistent with version
7. This practice ensures that player upgrades do not change the behavior of
System.security.allowDomain()
in deployed SWF files.
The version column in the previous table shows the latest SWF version involved in a cross-
scripting operation. Flash Player determines its behavior according to either the accessing
SWF file's version or the version of the SWF file that is being accessed, whichever is later.
The following paragraphs provide more detail about Flash Player security changes involving
System.security.allowDomain()
.
Version 5
. No cross-domain scripting restrictions.
Latest SWF
version involved
in the cross-
scripting
operation.
allowDomain()
needed?
allowInsecureDom
ain() needed?
Which SWF must call
allowDomain() or
allowInsecureDomain
()?
What can be
specified in
allowDomain() or
allowInsecureDomain
()?
5 or earlier
No
No
N/A
6
Yes, if
superdomain
s don't match
The SWF file being
accessed, or any
SWF file with the
same superdomain
as the SWF file
being accessed
•
Text-based
domain
(mysite.com)
•
IP address
(192.168.1.1)
7
Yes, if
domains don't
match exactly
Yes, if performing
HTTP-to-HTTPS
access (even if
domains match
exactly)
The SWF file being
accessed, or any
SWF file with
exactly the same
domain as the SWF
file being accessed
8 or later
SWF being
accessed
•
Text-based
domain
(mysite.com)
•
IP address
(192.168.1.1)
•
Wildcard (*)
Summary of Contents for FLASH 8-ACTIONSCRIPT 2.0 LANGUAGE
Page 1: ...ActionScript 2 0 Language Reference ...
Page 1352: ...1352 ActionScript classes ...