Search code examples
securityair

AIR HTML control having non local location does not run as application sandbox

I have HTML control on my main window like so:

<mx:HTML 
    id="hidHTML"
    location="http://localhost/index.html"
    enabled="true"
    paddingLeft="0"
    paddingRight="0"
    width="100%" height="100%"/>

The content of index.html is:

<!DOCTYPE html>
<html>
<head>
    <script>
        window.runtime.trace("wrong sandbox");
    </script>
</head>
<body>
    "remote" file
</body>
</html>

Opening the app gets me:

TypeError: Result of expression 'window.runtime' [undefined] is not an object.

Changing location to "index.html" and having index.html in my application directory (same content in index.html) gets me:

wrong sandbox

Obviously AIR has changed sandbox security when location is set to something other than the app dir. Funny enough I can't find anything in the manual about it:

http://help.adobe.com/en_US/FlashPlatform/reference/actionscript/3/mx/controls/HTML.html#location

Nor can I find anything that actually works to set the sandbox security back to application, any property or method of the mx:HTML that is.

Does anyone know how I can get application security for mx:HTML or find the documentation on why it's not running in application and the reason behind this?

Solution

  • Here you find every security knowladge:

    HTML security in Adobe AIR