| |||
| [Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] |
On Mar 24, 2007, John Riley wrote:
As of QuickTime 7.1.5, _javascript_:// urls are no longer supported in hotspots, HREFs, or any other URL that QuickTime movies can generate. This is a security fix. I know it seems a bit odd, since we all use _javascript_ on our web sties, but with YouTube, MySpace, etc., people are now hosting large numbers of other people's movies on their websites. Having your movie execute _javascript_ from your website is harmless; having a movie execute _javascript_ on someone else's web site without their knowledge is not. There was some malicious use made of this capability, unfortunately, and it had to be removed. URLs from QuickTime movies are now restricted to http://, https://, and rtsp:// for web movies, and file:/// for local disk-based movies. For additional details, see the "HTML Scripting Guide for QuickTime" and the "_javascript_ Scripting Guide for QuickTime": Hope this helps, steve |
_______________________________________________ Do not post admin requests to the list. They will be ignored. QuickTime-VR mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/quicktime-vr/email@hidden This email sent to email@hidden
| Home | Archives | FAQ | Terms/Conditions | Contact | RSS | Lists | About |
Visit the Apple Store online or at retail locations.
1-800-MY-APPLE
Contact Apple | Terms of Use | Privacy Policy
Copyright © 2007 Apple Inc. All rights reserved.