Adobe FMS Security Lag in HTMLProtection
Hi, i just wanted to say that there is a security lack with the HTML Protection.
If you have a domain e.g. yourdomain.com, and you protect your rtmp streams with html protection, you can steal streams like this if you know the swf path:
yourdomain.com/player.swf?file=FILENAME.flv&streamer=rtmp://SERVERIP:1935/live
Then you can steal easily streams.
A solution is to not allow all subdomains automatically when you enter a domain in the allowedHTML~.txt file. Then you could create a subdomain for the player, e.g. player.yourdomain.com and then locate the swf file there. Then just allow www.yourdomain.com and yourdomain.com and the streams are secure. Hope you will fix this problem.
![]()
