Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: QuickTime security updates URLs also



The problem you are having is indeed probably the result of a "Security Enhancement."

It has to do with limiting the way URLs work. (It's the same change that prevents javascript: urls from working)

See an earlier message from Steve Gulie ("Hotspots not working" Nov. 23, 2007)

From one of the links he references:


The QuickTime 7.1.5 Update places the following new restrictions on all URLs passed to the QuickTime plug-in:


- URLs cannot cross local/remote zone boundaries

Note: These URL restrictions only apply to the QuickTime plug-in, not to the rest of QuickTime (the QuickTime Player, the QuickTime API, and so on).

Here's how it works:

Prior to asking the user's web browser to access a URL, the QuickTime plug-in compares the requested URL with the "src" URL (the URL for the movie as specified in HTML) and does the following:

If the "src" movie is http:, https:, data:, rtsp:, or if there is no "src" attribute at all, it allows only http: and https: URLs.
If the "src" movie is "file:" it allows only file: URLs.
In other words, a local movie can invoke only local URLs, such as another local movie, and remote movies can invoke only remote URLs, such as another remote movie or a web page. Furthermore, remote URLs are restricted to the http:// and https:// protocols. Other protocols, such as javascript://, are prohibited.




Note the last sentence. Of course, "mailto:"; is one of those "other protocols" and is therefore prohibited.

eo

On Jan 6, 2008, at 9:33 PM, Paradox Photography wrote:

I have read on the list of changes that "broke" flash functions and changed the allowed java script calls but....
I checked a recently released title that I authored with a simple url request in LiveStage:
GoToURL("mailto:etc";)
It doesn't work anymore.
Is this broke for good or can I hope Apple will "fix" it?
If Apple killed the function for good .... what's the best work around?
Thanks,
Curt


_______________________________________________
Do not post admin requests to the list. They will be ignored.
QuickTime-VR mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/quicktime-vr/email@hidden

This email sent to email@hidden
References: 
 >QuickTime security updates (From: Paradox Photography <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.