From a379bd70fa2fa7116f9da914abf0fa32afb47d50 Mon Sep 17 00:00:00 2001 From: Dylan Schiemann Date: Fri, 24 Feb 2017 06:14:52 -0700 Subject: [PATCH] Remove cross-domain option for flash version of dojox/storage Squashed commit of the following: commit c1ae4d698e9883597f8ba09e3377ea117c994fa5 Author: Dylan Schiemann Date: Tue Feb 21 14:31:27 2017 -0700 remove cross-browser option for Flash storage --- flash/DojoExternalInterface.as | 3 ++- storage/Storage.swf | Bin 3325 -> 3303 bytes 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/flash/DojoExternalInterface.as b/flash/DojoExternalInterface.as index 37fa6daac3..ad9af52160 100644 --- a/flash/DojoExternalInterface.as +++ b/flash/DojoExternalInterface.as @@ -28,7 +28,8 @@ class DojoExternalInterface{ DojoExternalInterface.available = ExternalInterface.available; // make sure we can play nice in XD settings - System.security.allowDomain(unescape(_root.xdomain)); + // Note, this has been commented out as it may expose a cross domain sec issue + //System.security.allowDomain(unescape(_root.xdomain)); } /** Called when we are finished adding methods through addCallback. */ diff --git a/storage/Storage.swf b/storage/Storage.swf index 9a09f70f91e506843fc2c77aa7809abb359bbc1e..dc95378a385bdc30e9b720d97a958cd942fe2177 100644 GIT binary patch literal 3303 zcmVfo6S5pZ2Apih)+Pqm!Y}?2cej+J}{{M*+trO?R`LW|9D{nTtn~jq=@%k^` z*pwh8U8L(mpe0&XmJ+oj6~`@5^wykwDvY*3PkZX6*J9CAfdWMjJ@nesqCFJ7_0Zmm zx^Ldhkd#CvX;IXGDRSP-`Z>C%)xN zrMy}G!mL_ecEx$_tiJRuw_(~F4gB3T%N86Df1|TuuP!SOAihhfYCAio4Ncea9si(d zL9J2qYo=ZMt_2kwk~jT5s9OGtd|!RpbS=-@Xn4M9+t9GAiubfxF?~K1%ok?OHg{|b zc5Tz!153z+Zs8TD!G*lcQs1oYm=&u6WyaX7RF?5~2TerAD6D}aOt;#qTMgd>+iFx% zn~GI-D%OhWn^3p>J*NU@vuPiI)d0m@Fpb8IVHv36Qj@O-z{sN!_Ylv|$f)Ju()ZQljgYT7uc=)15TkQjT9sc{!( z%z6`_0m=67!oA?DieHPc-GF}Bc3}v%cVQ5=XJHmDg4eXs$=1nML{eu#0GJJLV{T`}+@k>MYz=radZ!RDwBbS=#q*#|Zy z3%R2-@Rrm=9IMb+MNb<{;xOO{qGFR?$OtaTyHD>Y1_K6r4$`yF$O$!uxMXDxCKv~O zIGqS(jubMY+vwp8st4*cC_GLKvu;5cSTcI^TgR+Eb!1n+9myR zJdH*R;h7HMD~Y!kenp?@DSTGH+LJb?U+YP`tY7L$o7OM%q+Qo<^rXG3XM57-_4j(x zZtCy%q}|eQz1g`J59e5dNuhIVjb_Vdsb3Y_z>~e22iktk-=nvOz?PKC<5$r?h=gFf z-v{L4)sp&$F*1`pP*LU|X>oi++TAvI&jHXsmNM=XSa5!fYiXS?zNi8VA}8R08Q!Mh z0IpOTWv3Ye;UO^zN29ETiKPg~u94w)!{KashvR0TlRONuOu~G{H=lb2Gaw&O2$S0^#)pc5p zia-rz*Fwa$T5tLXTh5D`wQSd#A>PYo=Lt2L z)V^41zo7QVQU?TeAeK5PsDrW8AweCAr49?~a4dC1P)A~^qk=jbOC1x`u~_Q3ppM5< zPYCLXPHOwSOkm5fz>p_7JUJyWAput2>m7nclj{N8r?XRg3k*E?SBX?KLid&r@Q)G4El^kS}*Zd zbhV}^xN%=jYvCMR5l9dh1wW85Q{~cC@#R~l-LgOnt=|WPAlQFK?u*hO!DoghX4ar{ zfTreHZw33(zM9alM#5n3A=j)=?%3#D^&lB){ntS2WT)1M1FlQtaf3}lDidkbcw0JpJkZ1Afu5&t7FN2J(%XL_-GK(Ml$L|^ivX<_Vm-W!)ZETqMvYs z3U`mlMsP)8AZ%Vs+~bF~_xMRENsw{Z5qo4g!KpXNnD;5_K6{(<<1KQraLE;l$a!iC z+=96m^UI{A>%6Vfj-2$4acTi@Xnrb&v9AVGw&bURpJ>g&@2J1-cKGryqsAD(60Bg@*0 zvWG-Z_Fd~&>&`G?u%^ObP38GwPqD?R$w2jD)~=?d41;HZanSE@4Hmf2Gzw)s?-qg% z_jrf<@f~pf)AA6tNTq@=kJ+j2f&Nf7-z}`O5liblxv)GV{WK74SKkIq3N(U?`-E2% z{wJHN5H`rSKecW9%Lg;9bWVlb&7}7R3z@FAF;T#g0k#}S8{*QEZPNbKTUw;vrDobE z?I}YAtU$JbGdfL$kQEK?G2+TpB*k+7|Ka%cwVxD=096LaM-(6`tND=3RbxXe+EKw* zlX-oO*e3xWzc`Krs>*{wrKwfr)DH8h)#l*)AXx_!6oCy&rrUJozcKnv3XQyW#e4tB zieKm%2&xQ(p$Gud*U6`&(AFail~JB8^d8ybYxsX<% zweb3|pvg-@;6$}EB<^&E1e+LAV+3g9lhIEB`&gs6p&^<{dS_GN6BYI2e@5%L4YCqAQ}u;)>{D zuDi^)Da(8p^sO9!yQCZ9?V>)-=7QZlrT3NZ+~~*Z2690&I*YSB9%lJ8M&B6o)$LIz3pEW2X*sp3!a-VOt0+Ln*Kuc zYF8M}s)cPfU!8^7xy~9`q|9|wi7Rtmlcft?B?_Vsj9-@4`+4%FyiH3b7b%G(qa~44 zz%6pQnP8O}u^!XGt?57MqDkk=tB)l18xmiR^K#V>j(!aK5XYEYsbSjt^%0ShskX)L zI`t7EkKtOG;AJD?J1)<&`~qxPA_x8%7G^$zpz6fRMh2y^lavw8gx7c@;+~Q1->j~q zWJHX~465+jX(0m-@$=sR009600{|}eO(Z$Qf;j*H literal 3325 zcmV@~+1^pZ zfSOhFYPwnbwgFY_Qqa8v*f+ct|9$mk!!cZU!*V^{G{G{As=M8&>K^Y3`U|~g>bs@^ zd#3IlfFZ_&n86*}_TXjJuIn`mnwH^Kbkv}9Sy5~y0hP`8bf_ENfn5c? z(J+s|u!8pJ02RAl&y`VhhyKA>OOB%-L8FP*3Uxe(*|)a2RC+vj87j8r+NP1K8oSMX za6PAH?c)qiRhq76*UMJZH1C6BG)(MN@*LO+NKCxT)VL2*dcA?qfMk02;X&}Vk6#P0 zV?i(MI4}S^d(aO%(=ZKJz-^c~FVAgsU%Ba+u&cYqwqwqtkE+JY{2sW?U7^(UwGZBB z|6evS0=%PnSSpnaui)5?HB;Yr0Zt@PAv-$yQwjc%VjqbtH65!gK;?0Kd>>;of1-c_ zs-)pZBEvsq!7~Ft5n@hyKvmMLk$qrOvY0*zS;?SB6eZeiLbRhuWr175c%-zilVUyV`ia) zE*Dw%U!HO=wkha)B}Q*8@Kcifk@PK?e7lgkay-Bc#f2i(-F?VXxLj4Fb=K!yK5ToR z^T&gJpDJZAGFlqlq-8^DNGq(%wGCRlDNbKF831)ko%ZL6i@jdtp@*~?^+r66dW*p) z+6G@qy#3%e)mvQ$e^1SIrOm4EcctA>XS&j+)v2zu+v*2hX&u zep$kF8z|mIv{AQT7~&`BPP!uS^48eP3hBJx@+I(1*%gC4LXGwvyJ=MgnyWYlLc!H~ z!#motU(}3cv(^ZKWG**L*lO10Uh;p-RW#P#&$)+tGz4{xfKsnkHym!zQ+&12C8Y!1 zF{=69=SGEmuxTR(gwpo%@@lCB4a2H3KvP)NRyMSCSXWOYu1p-HOxH-g&~Y=Q7=ah%&j3XM&Es59Fh1q zmV!__hE!@+aN=CB0@V(5H`Eg+#P`h34kAc`dplPU{t+(y9N%u?|F?W}&1XLBUxTu? zw6$6)EG@5=pR7J3GZ}sn>LNU^8hbSh4Im(nn7JJsx@gM@#36naHu>LU?RI)s9DfaA6sTJPY-Kh!sWpG@lpB z29eYYyhYNUEC}Mr@fpI7Oh^#&zZHC0g3?!mueOuIgzt{*T!uqhB3>lor6S+<{Bwz{ zjub}JW+_>LOE8!em6G#vj z1wW85Q~jkYq0Wr`mcf3 z$#$&~2i)|L$1OGqsZ69z;ce;Y@jwla2Wo-7Sy-t`N_~$X4GPfdi`n2=wbb`CYx z9?En$`wF6*AH^>P;yh~M{Fpcm;=Gd$RxH=+Zjla-@oSHS-2$PruwD!0NTD1yJ?Mr7 zL2T>6KyMOx^X2Wc4!1>K%d+8o20x9bd2k33pU^S=CbY{TqtE(&@q-Wr z1iJMcXE9AubOZ?^jHSE50+U~#7T9?~i=6odz4v&6NslaRH!2IftjE$iPcAIa_n~CF9>C%5=^qUkKdhLpL|C1Fz*EJAiKM)2Y07zXY zpAJI{M;I!@JX@$;vc=c%|H>8z`mmtMOG4m8xjiKA zwTA?o7*b;hXyfyvp91z*r__&;|8d%qs;>uO5y29{dGD&!v4=$W)g1hCm_hY7BM<^S`L{tJ#Ca_SfsC}n3z|KF z7SMDS74aZJ61oy=GLes5ZHxqA@D|?t4o_pRg**JHA$L1!D6vNkrNff0aA%oExzZBl zpF_+3z=H?gHhAP9_S^H09AFtxKRxabO63&+d&cNq>4~^kTFiHr`8NGB-(__x&)=@9 zns~dSPO`aR7gp)N)0vbY*{YiND}s`!2wtR$pcJhLwq1^%4&GE4|Es?wuC!mA`t`x+ z1u8G0ZEZF1kZU+kS>>zsVwQ?yoY{fBM%6yFSWB+1R~)-;RBJlBuYBzdYE$$!TGV-L zn^jg}i>uz1sk~L=jH1S6TN^Fk2iPAQS6Kmb&0+Zisg5V?+G|=BuV!0hgRlM;D+oHe zRYiplJg+e~JKNQw*+z4BmhNM@Yi5NRvuL1WSl+CAxHqdeJzEH8g~W%EN}_{;9Lyry z#Z7c?>sQrA-8|EP=lToXtvI!YHy6DC7KXEGVT;Yzr(t@gy#^L3bKREW%3L@6(uFD$ z1zrlpdPlthxzl1M6$7P%2ku*!^BkLlp5^`CUnr1Is}LnHQTKE52~ z<*M(U{1DUujxo7XgS7XnLn0+pZ41AL)gf_Jnm;+q%SI%3)IZPi3$Q^SIq=W0Fmnfj zsuL?4X_Us!QAW5BUgPmG*!^IV>N-+BECgma>MiBllMJ%@fw^V*)3Cg(Ho zP+rB?SC??gx1KJQmdjg98ya}*a>u_{phZkE#lj;aV$9E=60e;WGq8xC{{{d6|NjF3 HbC+V#8&++u