Comments on: “SecurityError: Error #3015: Loader.loadBytes() is not permitted to load content with executable code.” http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/ There is no universally agreed-upon biological definition of dreaming Fri, 21 Oct 2011 17:05:05 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: Jay http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/comment-page-1/#comment-891 Jay Wed, 22 Apr 2009 11:22:01 +0000 http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/#comment-891 Hi, Google helped me find this site. Turns out it helped solve another problem, although it makes it even more important now to download and use only certified AIR files. http://www.veryinteractivepeople.com/?p=67&cpage=1#comment-38 :) Hi,

Google helped me find this site. Turns out it helped solve another problem, although it makes it even more important now to download and use only certified AIR files.

http://www.veryinteractivepeople.com/?p=67&cpage=1#comment-38

:)

]]> By: Ethan http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/comment-page-1/#comment-760 Ethan Mon, 01 Dec 2008 08:05:50 +0000 http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/#comment-760 allowLoadBytesCodeExecution was added to prevent developers from accidentally making an extremely dangerous mistake. Code loaded via loadBytes() runs in the loader's security domain, with all associated privileges. This means that any attacker that can get their content into your ByteArray (by putting something on their server, or hacking *your* server, etc), can get their code to run on your users' machines. Please DO NOT blindly enable allowLoadBytesCodeExecution. Instead, you must be 100% confident that the bytes you're loading belong to you. They will be running with all the privilege that the user gave you when they installed your application. See my blog or the best practices section in the AIR security docs: http://help.adobe.com/en_US/AIR/1.5/devappsflex/WS5b3ccc516d4fbf351e63e3d118666ade46-7e59.html allowLoadBytesCodeExecution was added to prevent developers from accidentally making an extremely dangerous mistake. Code loaded via loadBytes() runs in the loader’s security domain, with all associated privileges.

This means that any attacker that can get their content into your ByteArray (by putting something on their server, or hacking *your* server, etc), can get their code to run on your users’ machines.

Please DO NOT blindly enable allowLoadBytesCodeExecution. Instead, you must be 100% confident that the bytes you’re loading belong to you. They will be running with all the privilege that the user gave you when they installed your application.

See my blog or the best practices section in the AIR security docs: http://help.adobe.com/en_US/AIR/1.5/devappsflex/WS5b3ccc516d4fbf351e63e3d118666ade46-7e59.html

]]> By: Zeh Fernando » Blog Archive » Why I love the ActionScript development community http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/comment-page-1/#comment-752 Zeh Fernando » Blog Archive » Why I love the ActionScript development community Tue, 25 Nov 2008 17:19:22 +0000 http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/#comment-752 [...] turns out a quick search on Google gives me this page where someone else tell what’s it all about and how to solve it. Bam, I patch my version of [...]

[...] turns out a quick search on Google gives me this page where someone else tell what’s it all about and how to solve it. Bam, I patch my version of [...]

]]> By: boo http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/comment-page-1/#comment-404 boo Fri, 27 Jun 2008 07:15:27 +0000 http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/#comment-404 this? http://blog.washingtonpost.com/securityfix/2008/05/exploit_inthewild_patch_your_f.html this?

http://blog.washingtonpost.com/securityfix/2008/05/exploit_inthewild_patch_your_f.html

]]> By: derRaab http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/comment-page-1/#comment-386 derRaab Tue, 17 Jun 2008 15:45:54 +0000 http://www.dreaminginflash.com/2008/05/14/%e2%80%9csecurityerror-error-3015-loaderloadbytes-is-not-permitted-to-load-content-with-executable-code/#comment-386 Thank's for this information! I used and mentioned it here: http://blog.derraab.com/2008/06/17/select-and-access-local-swf-files-within-an-air-application/ Kind regards Thank’s for this information! I used and mentioned it here: http://blog.derraab.com/2008/06/17/select-and-access-local-swf-files-within-an-air-application/

Kind regards

]]>