[Laszlo-user] Https in laszlo

[Raju Bitter]

Hey Tibor,

Another Hungarian coding LZX. :)

I remember that the problem with https and Flash was IE specific, wasn't it?

> Loading XML files in Flash over an SSL Connection in Internet Explorer fails
> if the Pragma:no-cache or Cache-control:no-cache HTTP headers are set on the
> XML file.
http://www.blog.lessrain.com/?p=276

There are some posts in the forum as well:
http://forum.openlaszlo.org/showthread.php?t=5891&highlight=https+internet+e
xplorer

I hope that helps.

Best,
Raju


> Von: Henry Minsky <henry.minsky at gmail.com>
> Datum: Tue, 4 Sep 2007 17:22:37 -0400
> An: Magyar Tibor <mtyb at freemail.hu>
> Cc: <laszlo-user at openlaszlo.org>
> Betreff: Re: [Laszlo-user] Https in laszlo
> 
> We have seen an issue that if you load an app over regular
> (non-secure) HTTP, and then
> try to make a  secure data request over HTTPS, that the newer Flash
> players will refuse to fetch the data. I think this is a new security
> policy from Macromedia. If you read their documentation, they refer to
> some workarounds for this, but always as "legacy" or "Flash 6
> compatibility", so I think they have phased out this behavior, as it
> is a potential  security hole.
> 
> On 8/22/07, Magyar Tibor <mtyb at freemail.hu> wrote:
>> 
>> Hi all!
>> 
>> I have a simple app ( below ), I call a php file to write a log file on the
>> server. It works fine, when I use http. But when I try to use https, nothing
>> happens.
>> I put a crossdomain.xml to the root of the server but it didn't work.
>> System.security.loadPolicyFile script also placed in the code.
>> Can anyone help let me know what's the problem?
>> 
>> Thanks a lot!
>> 
>> My app:
>> 
>> <canvas>
>>      <script>
>> 
>> System.security.loadPolicyFile("https://mydomain/crossdomain.xml");
>>     </script>
>>     <dataset name="dsTestHttps" secure="true"/>
>>     <view id="win" layout="axis:y;spacing:2">
>>         <method name="testcall">
>>             // set URL for testing
>>             var testURL = 'https://mydomain/sm/logger.php'
>>             // do request
>>             dsTestHttps.setAttribute( 'src', testURL );
>>             dsTestHttps.doRequest();
>>         </method>
>>         <button onclick="parent.testcall()">call logger</button>
>>     </view>
>> </canvas>
>> 
>> 
>> 
>> 
>> _____________________________________________________________________________
>> _________
>> Belevaló ajánlatok iskolakezdéshez! Vásároljon tankönyvet, számológépet,
>> írószert sorban állás nélkül! [origo] vásárlás
> 
> 
> -- 
> Henry Minsky
> Software Architect
> hminsky at laszlosystems.com
>