Flash Crossdomain - cross-domain

Similiar question: https://stackoverflow.com/questions/22311597/get-vk-video-direct-links-on-client-side-ip-html5
VK.com is a Russian social network sites which also allows you to host videos. They allow you to embed their videos but because of their cross-domain policy, you can't use ajax/flash requests to get the video page on the client side. However, this swf file does that without loading a cross-domain file? (I sniffed the network traffic, it seems as if the flash file doesn't request a crossdomain.xml file but rather directly load the vk.com page http://vk.com/video_ext.php?oid=196471971&id=167752304&hash=9fd63185df970616)
The URL for the swf file is
http://www.jethdfilmizle.com/veka.swf?file=vk.com%2Fvideo_ext.php%3Foid%3D189406059%26id%3D163663575%26hash%3D388c8150742ccb2f&otobaslat=0
Can anybody explain how this works?

Related

Content to service via a CDN

Which of these content is usually not very useful to service via a CDN
Videos
AJAX-requests
Images
HTML/CSS
Videos
Edge-Side includes
JavaScript
Could someone please provide an answer with explanation. Thank You!
Static files, like javascript, html, images, video you can host on a cdn, your ajax requests needs to be processed so you could not host them on a cdn.
CDN, is basically a server where the user can only download your files, the most cdn hosters have multiple servers so its more common that a server is near your user, based on that download speed will be faster.
So if you have static content ( dosnt need to be processed like ajax / api calls ) you can host it on a CDN

How to block uploads in specific browser without proxy

I have found titanium web proxy to block uploads in browser.
But the requirement is have to block all uploads in specific browser (Chrome, Edge, ..) without proxy?
Can any one help me on this topic how to get the code by searching the keyword?

.htaccess - Block requests, based on referrer protocol (file)

I am having a web program.
Some of my clients, are saving pages into their hard drive instead of creating shortcuts.
When they are trying to use the system they are opening the html from their local hard drive.
This creates a lot of bugs because the js files and the data they are using is not up to date, and a lot of time they are not logged in.
We had enough getting customers calling about bugs in our system, while they are using this local html file.
I can't force them to re-download the files, so I wish to block requests to my server that are reffered by 'file://' protocol.
The users will have html page with no data cuss or images and we hopes this will make the go to the website...
And here are my questions:
How do you block any requests that originated by "file://" protocol?
Do you have better solution?

Allow non-ssl content from external websites in an HTTPS website under IIS

I recently put my website under SSL. I've been able to adapt the website so that most of the content is under SSL, but some data, like Twitter avatars, are on an http website, so I'm receiving warnings, at least in Chrome.
Is there a policy in IIS to enable fetching non-ssl data from pages outside website's domain?
Is it depending on browser, on the source code, or on server settings?
If you insert direct HTTP links, the browser will complain (and this is correct). One of the options is to cache the data on your server and send it as "own" links for the server.
I believe it will, but the browser will complain about unsecured links usually.

Do you want to view only the webpage content that was delivered securely? secury waring in ie, how can i fix though programing

Ie showing following issue, how can i fix this though programing? Sorry for browser security fix
"Do you want to view only the webpage content that was delivered securely?
This webpage contains content that will not be delivered using a secure HTTPS connection, which could compromise the securty of the enture webpages."
That's a warning that you're serving some content via HTTPS and some via HTTP. To avoid that warning, ensure that everything is being served via HTTPS.
Unfortunately without more details that's all the advice I can offer.

Resources