Skip to main content
Participating Frequently
December 7, 2011
Question

Adobe FMS Security Lag in HTMLProtection

  • December 7, 2011
  • 1 reply
  • 438 views

Hi, i just wanted to say that there is a security lack with the HTML Protection.

If you have a domain e.g. yourdomain.com, and you protect your rtmp streams with html protection, you can steal streams like this if you know the swf path:

yourdomain.com/player.swf?file=FILENAME.flv&streamer=rtmp://SERVERIP:1935/live

Then you can steal easily streams.
A solution is to not allow all subdomains automatically when you enter a domain in the allowedHTML~.txt file. Then you could create a subdomain for the player, e.g. player.yourdomain.com and then locate the swf file there. Then just allow www.yourdomain.com and yourdomain.com and the streams are secure. Hope you will fix this problem.

    This topic has been closed for replies.

    1 reply

    Nikhil_Kalyan
    Participating Frequently
    December 8, 2011

    Thank you !