Learning ActionScript 2.0 in Adobe Flash
Understanding Security > About local file security and Flash Player > About local-with-file-system restrictions

About local-with-file-system restrictions

A local-with-file-system file has not been registered using the configuration file inside the FlashPlayerTrust directory, the Global Security Settings panel in the Settings Manager, or has not been granted network permission in the Publish Settings dialog box in the Flash authoring environment.

These files include legacy content that plays in Flash Player 8 and later. If you are developing content in Flash CS3, or you have content that falls into one of the following categories, you (or your users) should register the file as trusted. For information on registering a file as trusted, see Specifying trusted files using the Settings Manager. For information on granting permission for local file playback using configuration files, see Creating configuration files for Flash development.

Local-with-file-system SWF files have the following restrictions:

• Cannot access the network, which includes the following:
  • Loading other SWF files from the network (except using non-Internet UNC paths)
  • Sending HTTP requests
  • Making connections using XMLSocket, Flash Remoting, or NetConnection
  • Calling getURL() except if you use getURL("file:...") or getURL("mailto:...")
• Can interact with other local-with-file-system files, but includes restrictions to the following:
  • Cross-scripting (such as ActionScript access to objects in other SWF files).
  • Calling System.security.allowDomain
  • Using LocalConnection as sender or listener and regardless of LocalConnection.allowDomain handlers.

  NOTE

  Local-with-file-system SWF files can interact with other local-with-file-system, non-network SWF files. However, they cannot interact with local-with-network SWF files.

  Local-with-file-system SWF files have read access to known files on the local file system. For example, you can use XML.load() in a local-with-file-system SWF file as long as you load from the local file system and not the Internet.

• Local-with-file-system SWF files cannot communicate with HTML pages, which includes the following:
  • Inbound scripting (such as ExternalInterface API, ActiveX, LiveConnect, and XPConnect)
  • Outbound scripting (such as custom fscommand calls, and getURL("javascript:..."))

  NOTE

  An exception to this is if the HTML page is trusted.

View comments on LiveDocs