Upcoming Adobe Flash Player update could break Facebook apps
March 29th, 2008
Facebook’s Pete Bratach posted a note tonight regarding a recent notice from the Adobe Flash team that an upcoming April update to the Flash Player could break many Facebook applications. The security update significantly affects cross-domain functionality and could affect a large number of apps that use Flash.
Specifically, if any of the following apply to your app, you will be affected by the update:
- You use sockets or XMLSockets, regardless of the domain to which you are connecting
- You use addRequestHeader or URLRequest.requestHeaders in any network API call when sending or loading data cross-domain
- You provide access to content on remote domains as a web service provider
- You have SWFs that are exported for Flash Player 7 (SWF7) or earlier that communicate with the hosting HTML by any means
- You use “javascript:” through network APIs to communicate outside a SWF
For more information, check out the full post at the Adobe Developer Center.
|
|




March 30th, 2008 at 7:35 am
Does this update have anything to do with the PWN to OWN contest - how the Vista crackers used a 0day exploit in Flash?
March 30th, 2008 at 7:39 am
[...] Justin Smith of Inside Facebook has provided an alert that application developers for Facebook may find themselves with broken Flash-based apps come next month. [...]