[wp-trac] [WordPress Trac] #14648: Flash Uploader security error in IDN domains

WordPress Trac wp-trac at lists.automattic.com
Fri Oct 29 10:00:17 UTC 2010


#14648: Flash Uploader security error in IDN domains
--------------------------+-------------------------------------------------
 Reporter:  dovydas       |       Owner:                 
     Type:  defect (bug)  |      Status:  new            
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Media         |     Version:                 
 Severity:  normal        |    Keywords:                 
--------------------------+-------------------------------------------------
Changes (by dkwo):

 * cc: dkwo (added)


Comment:

 This is the exact problem I'm having -- Security Error with WordPress
 3.0.1 on IDN domain.

 This is a confirmed bug in SWFUploader 2.2.0 (the one WordPress 3.0.1 is
 using,) and according to the dev home page of SWFUploader looks like
 [http://code.google.com/p/swfupload/issues/detail?id=170 it has been fixed
 from 2.2.0.1].

 Also regarding crossdomain.xml, I've been researching about this and am
 pretty sure that my crossdomain.xml is legitimate, it seem to be
 SWFUploader's issue. For reference purpose this is my crossdomain.xml:
 {{{
 <?xml version="1.0"?>
 <!--           http://ブログ.牙.jp/crossdomain.xml -->
 <!-- http://xn--qckyd1c.xn--z1x.jp/crossdomain.xml -->
 <!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds
 /cross-domain-policy.dtd">
 <cross-domain-policy>
   <site-control permitted-cross-domain-policies="all" />
   <allow-access-from domain="*.牙.jp" />
   <allow-access-from domain="*.xn--z1x.jp" />
   <allow-access-from domain="59.106.171.76 " />
 </cross-domain-policy>
 }}}
 It would be really helpful that issue can be solved.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/14648#comment:5>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list