Remove cross-domain option for flash version of dojox/storage

Squashed commit of the following: commit c1ae4d6 Author: Dylan Schiemann <[email protected]> Date: Tue Feb 21 14:31:27 2017 -0700 remove cross-browser option for Flash storage
dojo · Feb 24, 2017 · a379bd7 · a379bd7
1 parent 2c8df0f
commit a379bd7
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/flash/DojoExternalInterface.as b/flash/DojoExternalInterface.as
@@ -28,7 +28,8 @@ class DojoExternalInterface{
 		DojoExternalInterface.available = ExternalInterface.available;
 
 		// make sure we can play nice in XD settings
-		System.security.allowDomain(unescape(_root.xdomain));
+		// Note, this has been commented out as it may expose a cross domain sec issue
+		//System.security.allowDomain(unescape(_root.xdomain));
 	}
 
 	/** Called when we are finished adding methods through addCallback. */

diff --git a/storage/Storage.swf b/storage/Storage.swf