SandBox Security Model - Revision history

Rahimjina: Review

2008-08-26T21:49:52Z

Review

EoinKeary at 13:12, 29 January 2008

2008-01-29T13:12:22Z

EoinKeary at 12:14, 29 January 2008

2008-01-29T12:14:03Z

EoinKeary: New page: '''Flash player assigns SWF files to sandboxes based on their origin''' '''Internet SWF files sandboxed based on origin domains''' '''Domain:''' - Any two SWF files can interact together ...

2008-01-29T12:07:02Z

New page: '''Flash player assigns SWF files to sandboxes based on their origin''' '''Internet SWF files sandboxed based on origin domains''' '''Domain:''' - Any two SWF files can interact together ...

New page

'''Flash player assigns SWF files to sandboxes based on their origin'''

'''Internet SWF files sandboxed based on origin domains'''
'''Domain:'''
- Any two SWF files can interact together within the same sandbox.
- Explicit persmission is required to interact with objects in other sandboxes.

'''Local'''

'''local-with-filesystem (default)'''
- The file system can read from local files only

'''local-with-networking'''
- Interact with other local-with-networking SWF files

'''local-trusted'''
- Can read from Local files, communicate to any server and access any SWF file.

“The sandbox defines a limited space in which a Macromedia Flash movie
running within the Macromedia Flash Player is allowed to operate. Its primary
purpose is to ensure the integrity and security of the client’s machine, and as
well as security of any Macromedia Flash movies running in the player.”

Cross Domain Permissions:
A Macromedia Flash movie playing on a web browser is not allowed access that is outside the exact domain from which is originated.
This is defined in the cross-domain policy file crossdomain.xml.
Policty files are used by Flash to permit Flash to load data from servers other than its native domain.
If a SWF file wishes to communicate with remote servers it must be granted explicit permission:

<cross-domain-policy>
<allow-access-from domain="example.domain.com"/>
</cross-domain-policy>

The API call System.security.loadPolicyFile(url) loads a cross domain policy from a specified URL which may be different from the crossdomain.xml file

Accessing JavaScript:

A parameter called allowScriptAccess governs if the Flash object has access to external scripts
It can have three possible values: '''never, same domain, always'''

← Older revision		Revision as of 13:12, 29 January 2008
Line 1:		Line 1:
		+	[[OWASP Code Review Guide Table of Contents]]__TOC__
		+
	'''Flash player assigns SWF files to sandboxes based on their origin'''		'''Flash player assigns SWF files to sandboxes based on their origin'''

@@ Line 6: / Line 6: @@
 '''Domain:'''
 - Any two SWF files can interact together within the same sandbox.
-- Explicit persmission is required to interact with objects in other sandboxes.
+- Explicit permission is required to interact with objects in other sandboxes.
 '''Local'''
@@ Line 29: / Line 29: @@
 A Macromedia Flash movie playing on a web browser is not allowed access that is outside the exact domain from which is originated.
 This is defined in the cross-domain policy file crossdomain.xml.
-Policty files are used by Flash to permit Flash to load data from servers other than its native domain.
+Policy files are used by Flash to permit Flash to load data from servers other than its native domain.
 If a SWF file wishes to communicate with remote servers it must be granted explicit permission:

@@ Line 37: / Line 37: @@
-Accessing JavaScript:
+'''Accessing JavaScript:'''
 A parameter called allowScriptAccess governs if the Flash object has access to external scripts
 It can have three possible values: '''never, same domain, always'''