Localconnection.allowinsecuredomain - MACROMEDIA FLASH MX 2004-ACTIONSCRIPT LANGUAGE Reference

LocalConnection.allowInsecureDomain

Availability
Flash Player 7.
Usage
receiving_lc.allowInsecureDomain = function([sendingDomain:String]) : Boolean
{
// Your statements here return true or false
}
Parameters
sendingDomain
SWF file that contains the sending LocalConnection object.
Returns
A Boolean value.
Description
Event handler; invoked whenever
using a secure protocol (HTTPS), receives a request to invoke a method from a sending
LocalConnection object that is in a SWF file hosted at a nonsecure protocol. Flash expects the
code you implement in this handler to return a Boolean value of
doesn't return
true
not invoked.
By default, SWF files hosted using the HTTPS protocol can be accessed only by other SWF files
hosted using the HTTPS protocol. This implementation maintains the integrity provided by the
HTTPS protocol.
Using this method to override the default behavior is not recommended, as it compromises
HTTPS security. However, you might need to do so, for example, if you need to permit access to
HTTPS files published for Flash Player 7 or later from HTTP files published for Flash Player 6.
A SWF file published for Flash Player 6 can use the
to permit HTTP to HTTPS access. However, because security is implemented differently in
Flash Player 7, you must use the
such access in SWF files published for Flash Player 7 or later.
Example
The following example allows connections from the current domain or from
www.macromedia.com, or allows insecure connections only from the current domain.
this.createTextField("welcome_txt", this.getNextHighestDepth(), 10, 10, 100,
20);
var my_lc:LocalConnection = new LocalConnection();
my_lc.allowDomain = function(sendingDomain:String) {
domain_txt.text = sendingDomain;
return (sendingDomain == this.domain() || sendingDomain ==
"www.macromedia.com");
406 Chapter 2: ActionScript Language Reference
A string that represents an optional parameter specifying the domain of the
receiving_lc
, the request from the sending object is ignored, and the method is
LocalConnection.allowInsecureDomain()
, which is in a SWF file hosted at a domain
or
true
LocalConnection.allowDomain
. If the handler
false
event handler
method to permit