ACTIONSCRIPT 3 Developer’s Guide en

ACTIONSCRIPT 3.0 DEVELOPER’S GUIDE
Security
Errors when calling restricted code
Adobe AIR 1.0 and later
If you call code that is restricted from use in a sandbox due to these security restrictions, the runtime dispatches a
JavaScript error: "Adobe AIR runtime security violation for JavaScript code in the application security sandbox."
For more information, see “Avoiding security-related JavaScript errors” on page 980.
Sandbox protection when loading HTML content from a string
Adobe AIR 1.0 and later
The loadString() method of the HTMLLoader class lets you create HTML content at run time. However, data that
you use as the HTML content can be corrupted if the data is loaded from an insecure Internet source. For this reason,
by default, HTML created using the loadString() method is not placed in the application sandbox and it has no
access to AIR APIs. However, you can set the placeLoadStringContentInApplicationSandbox property of an
HTMLLoader object to true to place HTML created using the loadString() method into the application sandbox.
For more information, see “Loading HTML content from a string” on page 979.
Scripting between content in different domains
Adobe AIR 1.0 and later
AIR applications are granted special privileges when they are installed. It is crucial that the same privileges not be
leaked to other content, including remote files and local files that are not part of the application.
About the AIR sandbox bridge
Adobe AIR 1.0 and later
Normally, content from other domains cannot call scripts in other domains. To protect AIR applications from
accidental leakage of privileged information or control, the following restrictions are placed on content in the
application security sandbox (content installed with the application):
Code in the application security sandbox cannot allow to other sandboxes by calling the
Security.allowDomain() method. Calling this method from the application security sandbox will throw an
error.
Importing non-application content into the application sandbox by setting the LoaderContext.securityDomain
or the LoaderContext.applicationDomain property is prevented.
There are still cases where the main AIR application requires content from a remote domain to have controlled access
to scripts in the main AIR application, or vice versa. To accomplish this, the runtime provides a sandbox bridge
mechanism, which serves as a gateway between the two sandboxes. A sandbox bridge can provide explicit interaction
between remote and application security sandboxes.
The sandbox bridge exposes two objects that both loaded and loading scripts can access:
The parentSandboxBridge object lets loading content expose properties and functions to scripts in the loaded
content.
The childSandboxBridge object lets loaded content expose properties and function to scripts in the loading
content.
Last updated 6/6/2012
1075