Security issues with Wordnik API AS3 - actionscript-3

I'm making an online game, that uses Wordnik API AS3 to fetch word definitions. Everything works fine when i'm testing localy (sandboxType: localTrusted). But when I upload my .swf (sandboxType: remote or localWithNetwork) I get Wordnik API response "Security error accessing url".
I've set "useNetworkServices" to true.
I'm doing:
Security.allowDomain("api.wordnik.com");
Security.loadPolicyFile("api.wordnik.com/crossdomain.xml");
It could be some issue with crossdomain.xml. When testing in localTrusted I get the debug message "api.wordnik.com does not specify meta-rule. using default meta-rule 'master-only'". I get similar message for Google Interactive Media Ads, but it defaults to 'by-content-type'. Google IMA works when uploaded, Wordnik doesn't.
I'm not even sure if the problem is on my side.
Helpful answer would provide a working solution for the security issue, or point to any application using Wordnik AS3 API online - maybe its developers could help.
:)

Related

Flash Player POST form submission to Google Drive #2048 Error

So I have project in which I have a Google Drive spreadsheet with a linked form. An ActionScript 3 function is then filling in this data and submitting it. This is working fine... until I open the SWF in debug mode or outside of Flash Professional. I get a 2048 error about the security.
I've done some researching and it's all about accessing it and crossdomain.xml and all that. I didn't really understand it that much, although I understand roughly what the error is. Unfortunately I have not seen a solution to help me out yet.
The SWF and a basic HTML page will be hosted on a Google Sites page if that makes any difference.
So my question is how is the best way to go about this from here? Some form of crossdomain code? Some more AS3? Do I need to host a domain myself? (I'd rather not do this as I know practically no PHP nor much about any web server like MySQL or whatever.)

Simple API Access status: suddenly INACTIVE

I was developing android application that has backup to google drive feature.
I have used Simple API Access key and it worked like a charm for few weeks.
However, from yesterday, it does not work at all. (cannot list uploaded files and 403 fobidden error when trying to upload new file) I checked Google APIs Console and found out
Simple API Access
Status: Inactive
and Reports is not available and keeps showing popup message "An unexpected error has occurred. We're looking into it."
I googled about this message but there is no solution. (but found several issues related to google cloud SQL)
I was considering to use google drive on commercial level android app and this is very bad...
I wonder what is the problem and how to reactivate api status.
Thanks :)
Unfortunately, because of the security model of the Drive SDK, we need to be sure that an application is who they say they are, which simple access does not give enough assurance of. For a commercial application, this strength of security is great for users.
For a solution, you need to use Google Play Services as outlined in the documentation. We are currently working on a guide to get started with this very quickly on Android, and should be available within the next week.

Twitter api call no longer working after uploading Flex application

I have a Flex application that uses the Last.fm and Twitter api. After I uploaded the project to my webspace, the Twitter api call doesn't work anymore, but the Last.fm still works. My url still works:
var getTweetsUrl = "https://api.twitter.com/1/statuses/user_timeline.xml?screen_name=deftonesband&count=3"
This is the code used for the httpservice:
<s:HTTPService id="getTweetsService" url="{getTweetsUrl}" result="displayTweets(event)" fault="twitterFail(event)" resultFormat="e4x" />
Every time the fault event is fired, even though the url is correct. Anyone knows of this problem?
due to crossdomain policy of twitter.com (https://api.twitter.com/crossdomain.xml) you are not able to invoke twitter api from other domain without permission (locally there is no crossdomain check in flash player)
to get permission from twitter user you have to use oAuth
I think easiest way to implement oAuth for twitter api is to use Open Source library for AS3 called Tweetr:
http://wiki.swfjunkie.com/tweetr

Google maps API v3 flash empty viewport

I'm using the google maps API v3 with flash and it works fine on one of my websites.
I transfered it to another website and changed the API key, but all I see is the default background color with no error message. Unfortunatly, I cannot access the flash source code.
Is there a way to debug the application or see some error messages without the source code?
Or maybe somebody has an idea of what is wrong?
Use Firebug Net monitor to see if all of the request are going through. That would be the first place that I would start. My guess is that there are HTTP Requests trying to get data from a domain that doesn't have a crossdomain policy allowing access from the new site you moved it to.
First of all maps V3 doesn't need a a key. I think you are combining parts of V2 (with key) and V3(which doesn't need key) so obviously there is something wrong in your code.

Chrome Extensions accessing header information

I am on a mission to expand my knowledge and create an extension for chrome similar to how firephp works. I want to integrate with my existing logging and debugging api within my framework and I want to be able to send these messages to the console. Nothing really robust to start with just a way to send debug messages to the chrome console from php.
The plan is to send the messages via the headers and have the extension read those headers and interpret them. I've been trying to find information on accessing the response headers and can't find any examples. Some of the research has led me to possibly having to develop an NPAPI plugin to be able to accomplish this.
Before traveling down a dead end path I wanted to get the communities opinion here on which path I should be taking to find a solution.
Chrome cannot currently do this, but Google is working on it. A preliminary and incomplete implementation is in the development version of Chrome, or in Chrome Canary.
http://code.google.com/chrome/extensions/experimental.webRequest.html
onHeadersReceived
http://dev.chromium.org/developers/design-documents/extensions/notifications-of-web-request-and-navigation
You can track progress here.
http://crbug.com/50943
The web request api is now in stable and can be used to access header events.
https://developer.chrome.com/extensions/webRequest.html
Here is an extension that does what you are trying to do. It uses cookies to communicate, from what I can tell.