------------------------------
Message: 2
Date: Mon, 26 Mar 2007 14:04:02 -0700
From: Steve Gulie <email@hidden>
Subject: Re: QT_WriteOBJECT and javascript with QuickTime 7.1.5
To: email@hidden
Message-ID: <email@hidden>
Content-Type: text/plain; charset="us-ascii"
On Mar 24, 2007, John Riley wrote:
I am having trouble with a project after an update to QuickTime
7.1.5. I have an object movie that is embedded using the
AC_QuickTime.js and QT_WriteOBJECT. I am using two different
javascripts:
'javascript:goTo(\'christine_de_pisan.php\');'
and
'hotspot60', 'javascript:changeAngle(27.0);'
These were working fine in QT 7.1.3, but the hospots do not register
being clicked on in 7.1.5. The cursor shows the hotspot, but
clicking does nothing.
Anyone got an idea of what might be happening and a workaround?
As of QuickTime 7.1.5, javascript:// urls are no longer supported in
hotspots, HREFs, or any other URL that QuickTime movies can generate.
This is a security fix. I know it seems a bit odd, since we all use
JavaScript on our web sties, but with YouTube, MySpace, etc., people
are now hosting large numbers of other people's movies on their
websites. Having your movie execute JavaScript from your website is
harmless; having a movie execute JavaScript on someone else's web
site without their knowledge is not. There was some malicious use
made of this capability, unfortunately, and it had to be removed.
URLs from QuickTime movies are now restricted to http://, https://,
and rtsp:// for web movies, and file:/// for local disk-based movies.
For additional details, see the "HTML Scripting Guide for QuickTime"
and the "JavaScript Scripting Guide for QuickTime":
http://developer.apple.com/documentation/quicktime/Scripting-date.html
Hope this helps,
steve
