[Laszlo-checkins] r10364 - openlaszlo/trunk/WEB-INF/lps/lfc/kernel/swf9

[hqm@openlaszlo.org]

Author: hqm
Date: 2008-07-15 07:04:57 -0700 (Tue, 15 Jul 2008)
New Revision: 10364

Modified:
   openlaszlo/trunk/WEB-INF/lps/lfc/kernel/swf9/LzHTTPLoader.as
Log:
Change 20080714-hqm-V by hqm at badtzmaru.home on 2008-07-14 21:40:34 EDT
    in /Users/hqm/openlaszlo/trunk4
    for http://svn.openlaszlo.org/openlaszlo/trunk

Summary: ensure SOLO data loads are done with absolute URLs

New Features:

Bugs Fixed:

Technical Reviewer: pbr
QA Reviewer: max
Doc Reviewer: (pending)

Documentation:

Release Notes:

Details:

+ when loading a data URL, use an absolute URL, as relative URLs will
confuse the Flash security rules

Tests:

test/lfc/data/alldata.lzx (fails in other way, but no longer reports
security errors in loading http)



Modified: openlaszlo/trunk/WEB-INF/lps/lfc/kernel/swf9/LzHTTPLoader.as
===================================================================
--- openlaszlo/trunk/WEB-INF/lps/lfc/kernel/swf9/LzHTTPLoader.as	2008-07-15 13:14:53 UTC (rev 10363)
+++ openlaszlo/trunk/WEB-INF/lps/lfc/kernel/swf9/LzHTTPLoader.as	2008-07-15 14:04:57 UTC (rev 10364)
@@ -338,6 +338,10 @@
     // parseXML flag : if true, translate native XML tree into LzDataNode tree,
     //                 if false, don't attempt to translate the XML (if it exists)
     public function loadXMLDoc (method:String, url:String, headers:Object, postbody:String, ignorewhite:Boolean) :void {
+
+        var secure:Boolean = (url.indexOf("https:") == 0);
+        url = lz.Browser.toAbsoluteURL( url, secure );
+
         if (this.loader == null) {
             // TODO [hqm 2008-01] wonder if we should be throwing an
             // exception or returning some indication that the send