Page 1 of 1

StiWebViewerFx sandbox security problem

Posted: Fri Oct 14, 2011 6:36 am
by sofiane

I used the StiWebViewerFx component. I used an apache proxy server between my client (firefox) and my IIS server.
Apache (domainA)
IIS (DomainB)

When I try to access to http://domainA/WebImpression/WebImpression.aspx from my client firefox I have this flash error :
SecurityError: Error #2060: Violation de la sécurité Sandbox : l’appelant ExternalInterface http://domainB/WebImpression/WebImpress ... AspNet.swf ne peut pas accéder à http://domainA/WebImpression/WebImpression.aspx.
at flash.external::ExternalInterface$/_initJS()
at flash.external::ExternalInterface$/call()
at ViewerFx_AspNet/onInitialize()
at ViewerFx_AspNet/___ViewerFx_AspNet_Application1_initialize()
at flash.events::EventDispatcher/dispatchEventFunction()
at flash.events::EventDispatcher/dispatchEvent()
at mx.core::UIComponent/dispatchEvent()
at mx.core::UIComponent/set processedDescriptors()
at mx.core::Container/createComponentsFromDescriptors()
at mx.core::Container/createChildren()
at mx.core::UIComponent/initialize()
at mx.core::Container/initialize()
at mx.core::Application/initialize()
at ViewerFx_AspNet/initialize()
at mx.managers.systemClasses::ChildManager/childAdded()
at mx.managers.systemClasses::ChildManager/initializeTopLevelWindow()
If I modifiy the allowscriptaccess parameter (from saimDomain to always) of the Swf Object in my html, the problem is solved.

Is it possible to specify the allowscriptaccess option of the StiWebViewerFx ? Actually it is specified to saimDomain, i would like to specify it to always.

Thanks in advance.

StiWebViewerFx sandbox security problem

Posted: Mon Oct 17, 2011 1:39 am
by Vladimir
Hello,

We have made this fix, it will be available from the next prerelease builds.

Thank you.

StiWebViewerFx sandbox security problem

Posted: Mon Oct 17, 2011 2:24 am
by sofiane
will it be added to stimulsoft designer.Web ?

That will help us to resolving many technical problems for integrating the tool.

Thank you for your response

StiWebViewerFx sandbox security problem

Posted: Mon Oct 17, 2011 3:07 am
by Vladimir
Hello,

Yes, this parameter is added for the Designer.Web and WebViewerFx.

Thank you.