Welcome Guest ( Log In | Register )



 
Reply to this topicStart new topic
> Security Sandbox Violation?
Cruzo
post Jul 13 2006, 02:53 PM
Post #1


Newbie [ Level 2 ]
Group Icon

Group: Members
Posts: 13
Joined: 13-July 06
Member No.: 14,481



I get a security sandbox error in flash when i try and do a upload file or after closer investigation only when i try and type something in an input box through my upload function. I had this all working as you know previously.

I am not sure why i get this. I don't get it when i browse for a file in my upload function but rather when i try and type something in on my input field text box for my "title" field.

i have tried adding System.security.allowDomain("designercolin.com"); even inside my actionscript and that doesn't even seem to work.

Any idea why it would be causing an error when i try and type in my input field. It doesn't even give me the error when i browse for a file to try and upload a file using my upload function. I thought it may have something to do with browsing first then adding the title so i tried adding a title first and i still get the "security sandbox" error.

the exact error is below. It only happens when i type in the box.

*** Security Sandbox Violation ***
SecurityDomain 'http://www.designercolin.com/temp/ispire/get_boards.php' tried to access incompatible context 'file:///Macintosh%20HD/Users/colintoomey/Documents/classes/graduate%20work/thesis%20stuff/ispire%20app/ispire%20v1.026.swf'

this error never happened before in previous versions of my upload script even with the input fields i had.

I have tried it multiple times and sometimes i get the same security error with the same security domain file and other times i get a securitydomain with files get_boards.php or sometimes even a jpeg file. I can try it in many areas like in the search box input field and it will give me an issue with the get_boards.php file for security domain but other places i get other path locations.

all my php files seem to load perfectly fine and i get no errors at all until i try and type something in any of the input boxes in my web app.

What i have started to realize is that it has nothing to do paticular with the upload function but rather something with the input text boxes or something with local files and remote files although im not sure. I tried for instance in another part of my application that has a input box typing in that and i get the same security error. Basically anywhere i type in an input box is when i get the security error.

What is a security sandbox error though and how do i solve it? Is it something in my php file or my actionscript? Im confused.
Go to the top of the page
 
+Quote Post
mastercomputers
post Jul 18 2006, 04:49 PM
Post #2


BUG.SWAT.PATROL
Group Icon

Group: Members
Posts: 626
Joined: 1-September 04
From: Auckland, New Zealand
Member No.: 27



I'll try to explain Security Sandbox. If you can imagine a sandbox then imagine that the sand in that sandbox is not allowed to be used/put, or any other action (delete, copied, formatted, etc) from another different sandbox, in this case another domain unless the "client" allows it, person who's actually having the script ran on them.

So in most cases scripts must either only run on the domain that is calling it, if however this script needs to call or work with another domain, the client must allow this, not the programmer/scripter because it could actually be something malicious, the only proper way to get pass this is I believe in having your scripts signed, but I've never done this before with scripts, so I have no idea how you go about doing this.

So that's basically the Security Sandbox, a technique that limits access to only what is allowed without allowing access outside of it. This is for javascript, actionscript, ecmascript, activex and possibly more, server side scripts don't have these security techniques, but it's possible to create it so it's sandboxed.

Cheers,

MC
Go to the top of the page
 
+Quote Post
iGuest
post Jan 30 2008, 06:57 PM
Post #3


Newbie [ Level 1 ]
Group Icon

Group: Members
Posts: 0
Joined: 1-November 07
Member No.: 25,869



Security Sandbox Violation
Security Sandbox Violation?

Yeah, this is really annoying. It doesn't make sense to me why the violation prints in the output window on every keystroke. What does the user typing in an input have to do with access violation of a .Jpg loaded from the net? It's not like I'm typing into the picture. !

-sean
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

Collapse

> Similar Topics

Topics Topics
  1. Microsoft's security program manager...(5)
  2. Security Issue With Ctrl+c/copy On Clipboard(7)
  3. Need Help: PHP Security - Login Script For Site(8)
  4. Wireless Security System(5)
  5. Avoid Phpbb! New Security Exploit!(20)
  6. Use Steganos Security Suite(0)
  7. Ie Security Settings And Ie 7?(0)
  8. Ten Tips To Increase Your Windows Security(9)
  9. Security Questions(3)
  10. Security Guidelines For Internet Users(0)
  11. [info] Security(4)
  12. Adding Security Enhancements To Php Programs(0)
  13. Internet Security(4)
  14. Home Security And Alarm Monitoring(0)
  15. Windows Coa Labels - Now Torn For Your Security!(12)
  1. Security Theater - Cost-ineffective Measures That Don't Cut It(1)
  2. Kaspersky Internet Security 7.0.0.125(2)
  3. Security Features Debut In Latest Preview, As Firefox 3.0 Heads Down The Stretch(0)
  4. Beyond Security(4)
  5. Yahoo! Messenger Author’s New Security Book(0)
  6. A Very Important Security Question.(2)
  7. Cutenews 1.4.5 Security Alert Regarding Search.php(1)
  8. Java Java.security.accesscontrolexception(6)
  9. Need More Security(0)
  10. Is The Sandbox Only For Google?(0)
  11. Cpanel Security(0)
  12. Free Web-based Online Ftp Client(5)
  13. How Do Disable Vistas Anoyying Notifications For Security(3)


 



- Lo-Fi Version Time is now: 22nd August 2008 - 03:41 AM