Skip to content
This repository has been archived by the owner on Sep 30, 2021. It is now read-only.
Permalink
Browse files Browse the repository at this point in the history
Merge pull request #382 from flowplayer/bug/381
don't accept callback to be passed in the query string (#381)
  • Loading branch information
anssip committed May 14, 2013
2 parents 74c555c + 64f25fc commit 017f8c2
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion lib/as/Flowplayer.as
Expand Up @@ -82,6 +82,7 @@ public class Flowplayer extends Sprite {
stage.scaleMode = StageScaleMode.NO_SCALE;
stage.align = StageAlign.TOP_LEFT;

if (this.loaderInfo.url.indexOf("callback=") > 0) throw new Error("Security error");
conf = this.loaderInfo.parameters;

// The API
Expand Down Expand Up @@ -231,7 +232,7 @@ public class Flowplayer extends Sprite {

conf.url = unescape(conf.url);

if (conf.debug) fire("debug.url", conf.url);
debug("debug.url", conf.url);

conn = new NetConnection();

Expand Down Expand Up @@ -430,6 +431,7 @@ public class Flowplayer extends Sprite {
private function debug(msg:String, data:Object = null):void {
if (!conf.debug) return;
fire("debug: " + msg, data);
// ExternalInterface.call("console.log", msg, data);
}

private function fire(type:String, data:Object = null):void {
Expand Down

0 comments on commit 017f8c2

Please sign in to comment.