Participant

Question

Crossdomain.xml and Invalid RSL issue in Adobe Flash Player

Forum|Forum|10 years ago
August 21, 2015
15 replies
3684 views

We have Flex application which randomly stopped loading today. We have made no relevant changes we are aware of to our environment, and we have not modified the application at all. We are running the following software versions:

OS Version: Windows 7 Enterprise, 32-bit

Browser: Internet Explorer 8.0.7601.17514CO

Flash version: 17.0.0.188

Here is the output from flashlog.txt when we try to load the app with flash debugging enabled:

Warning: Ignoring 'secure' attribute in policy file from http://fpdownload.adobe.com/pub/swz/crossdomain.xml. The 'secure' attribute is only permitted in HTTPS and socket policy files. See http://www.adobe.com/go/strict_policy_files for details.

Error: Ignoring policy file at http://fpdownload.adobe.com/pub/swz/crossdomain.xml due to meta-policy 'master-only'.

Error: Request for resource at http://fpdownload.adobe.com/pub/swz/tlf/1.1.0.604/textLayout_1.1.0.604.swz by requestor from https://[internal URL redacted]/flex/ca_flex_ui.swf is denied due to lack of policy file permissions.

*** Security Sandbox Violation ***

Connection to http://fpdownload.adobe.com/pub/swz/tlf/1.1.0.604/textLayout_1.1.0.604.swz halted - not permitted from https://[internal URL redacted]/flex/ca_flex_ui.swf

Error #2048: Security sandbox violation: https://[internal URL redacted]/flex/ca_flex_ui.swf cannot load data from http://fpdownload.adobe.com/pub/swz/tlf/1.1.0.604/textLayout_1.1.0.604.swz.

Failed to load RSL http://fpdownload.adobe.com/pub/swz/tlf/1.1.0.604/textLayout_1.1.0.604.swz

Failing over to RSL textLayout_1.1.0.604.swz

Error #2046: The loaded file did not have a valid signature.

This topic has been closed for replies.

F

FBX Ehelier

Inspiring

http://fpdownload.adobe.com/crossdomain.xml

Gives me a 404 right now.

Clients are complaining our Flex applications embedded in their websites is launching 404 issues.

scolab-andre

Participant

Same problem here, I use fiddler to check this issue.

The file http://fpdownload.adobe.com/pub/swz/crossdomain.xml give me this warning.

Warning: Ignoring 'secure' attribute in policy file from http://fpdownload.adobe.com/pub/swz/crossdomain.xml. The 'secure' attribute is only permitted in HTTPS and socket policy files.

The solution for this warning is to change all http for https in RSL URL in Flex library path.

After this change I got this warning because flash player can't download the master policy file from https://fpdownload.adobe.com/crossdomain.xml

Warning: Domain fpdownload.adobe.com does not specify a meta-policy. Applying default meta-policy 'master-only'. This configuration is deprecated. See http://www.adobe.com/go/strict_policy_files to fix this problem.

Error: Ignoring policy file at https://fpdownload.adobe.com/pub/swz/crossdomain.xml due to meta-policy 'master-only'.

The issue is on Adobe side.

B

briant29513083

Participant

We had the exact same issue starting last Friday. Our SWF refused to load a TLF RSL, so when any user loaded up the Flash application, if they didn't happen to already have the RSL cached, the user would just see a blank screen and a movie not loaded error.

Digging in to the logs, we saw the same

Error: Ignoring policy file at http://fpdownload.adobe.com/pub/swz/crossdomain.xml due to meta-policy 'master-only'.

which meant the policy file at http://fpdownload.adobe.com/pub/swz/crossdomain.xml‌, which looks like

<cross-domain-policy>
<allow-access-from domain="*" secure="false"/>
</cross-domain-policy>

was being ignored and superseded by the policy file at http://fpdownload.adobe.com/crossdomain.xml‌, which last Friday looked like

<cross-domain-policy>
  <site-control permitted-cross-domain-policies="master-only"/>
  <allow-access-from domain="*.adobe.com"/>
  <allow-access-from domain="*.macromedia.com"/>
</cross-domain-policy>

This master-only site-control policy prevented any other cross domain policy file from being loaded and Adobe's root cross domain policy file only allows SWFs hosted either *.adobe.com or *.macromedia.com to access resources hosted on fpdownload.adobe.com.

Everything is working again for us too. It looks like at some point over the weekend, someone at Adobe removed the master-only policy from the root cross domain policy. That's great and I'm glad this is fixed, but it was definitely a huge oversight. I know it caused a lot of confusion with a couple of our customers, and those are just the ones who contacted us.

Edit: Adobe responded while I was typing this up. Thanks for getting the fix pushed through.

D

DJ Spinney

Participant

Same issue here - hoping for a prompt reply from Adobe

J

jaredp23871542

Participant

Jon, I replied to the Adobe tech about having the same issue but is there any change you are with BCBS or a subsidary of that? We are and with our Microsoft ticket open for the same issue to help us debug I have heard we are not the only plan having this issue so I wanted to check with you.

J

JonHoffmanAuthor

Participant

Yes, I work for BlueCross BlueShield of Tennessee.

chris.campbell

Legend

Thank you for the heads up and I apologize for the interruption. I've asked our engineering team to take a look and they are investigating now. I'll post back once I learn more.

J

jaredp23871542

Participant

We are having an extremely similar issue and it stopped all of our environments overnight and our Production is DOWN! FYI I put $SERVER in place of the file path so that our real address is not shown below.

Warning: valueOf is not a function

Warning: Ignoring 'secure' attribute in policy file from http://fpdownload.adobe.com/pub/swz/crossdomain.xml. The 'secure' attribute is only permitted in HTTPS and socket policy files. See http://www.adobe.com/go/strict_policy_files for details.

Error: Ignoring policy file at http://fpdownload.adobe.com/pub/swz/crossdomain.xml due to meta-policy 'master-only'.

Error: Request for resource at http://fpdownload.adobe.com/pub/swz/tlf/1.1.0.604/textLayout_1.1.0.604.swz by requestor from http://$SERVER:9080/caweb/flex/ca_flex_ui.swf is denied due to lack of policy file permissions.

*** Security Sandbox Violation ***

Connection to http://fpdownload.adobe.com/pub/swz/tlf/1.1.0.604/textLayout_1.1.0.604.swz halted - not permitted from http://$SERVER:9080/caweb/flex/ca_flex_ui.swf

Error #2048: Security sandbox violation: http://$SERVER:9080/caweb/flex/ca_flex_ui.swf cannot load data from http://fpdownload.adobe.com/pub/swz/tlf/1.1.0.604/textLayout_1.1.0.604.swz.

Failed to load RSL http://fpdownload.adobe.com/pub/swz/tlf/1.1.0.604/textLayout_1.1.0.604.swz

Failing over to RSL textLayout_1.1.0.604.swz

Error #2046: The loaded file did not have a valid signature.