Skip to content
This repository has been archived by the owner on Sep 30, 2021. It is now read-only.

Commit

Permalink
Merge pull request #578 from flowplayer/bug/381
Browse files Browse the repository at this point in the history
Decode the URL before checking the callback param.
  • Loading branch information
anssip committed Nov 11, 2013
2 parents ce6de88 + 236f6b5 commit 27e8f17
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion lib/as/Flowplayer.as
Original file line number Diff line number Diff line change
Expand Up @@ -83,7 +83,8 @@ public class Flowplayer extends Sprite {
stage.scaleMode = StageScaleMode.NO_SCALE;
stage.align = StageAlign.TOP_LEFT;

if (this.loaderInfo.url.indexOf("callback=") > 0) throw new Error("Security error");
var swfUrl:String = decodeURIComponent(this.loaderInfo.url);
if (swfUrl.indexOf("callback=") > 0) throw new Error("Security error");
conf = this.loaderInfo.parameters;

// IE needs mouse / keyboard events
Expand Down

0 comments on commit 27e8f17

Please sign in to comment.