[Pkg-javascript-commits] [jarisplayer] 28/80: fixed youtube security bug

Jonas Smedegaard dr at jones.dk
Tue May 10 08:45:32 UTC 2016


This is an automated email from the git hooks/post-receive script.

js pushed a commit to branch master
in repository jarisplayer.

commit fe6bf049c9d5b2c021edaa37287cd6ccf3306549
Author: jgmylm <jgmylm at edf201c3-a14d-0410-a11e-aa85364efa9f>
Date:   Fri Mar 19 09:22:55 2010 +0000

    fixed youtube security bug
    
    git-svn-id: https://jaris.svn.sourceforge.net/svnroot/jaris/trunk@28 edf201c3-a14d-0410-a11e-aa85364efa9f
---
 bin/JarisFLVPlayer.swf     | Bin 20640 -> 20679 bytes
 changes.txt                |   6 +++++-
 src/jaris/Version.hx       |   4 ++--
 src/jaris/player/Player.hx |  11 ++++++++---
 4 files changed, 15 insertions(+), 6 deletions(-)

diff --git a/bin/JarisFLVPlayer.swf b/bin/JarisFLVPlayer.swf
index 7e1b949..6e8a219 100644
Binary files a/bin/JarisFLVPlayer.swf and b/bin/JarisFLVPlayer.swf differ
diff --git a/changes.txt b/changes.txt
index fd44158..e5d1628 100644
--- a/changes.txt
+++ b/changes.txt
@@ -1,4 +1,8 @@
-Jaris FLV Player v2.0.6 beta - 03/13/2010
+Jaris FLV Player v2.0.7 beta - 03/19/2010
+
+	* Fixed youtube security bug
+
+Jaris FLV Player v2.0.6 beta - 03/13/2010
 
 	* Added: display current aspect ratio label on aspect ratio toggle
 	* Improved readability of text
diff --git a/src/jaris/Version.hx b/src/jaris/Version.hx
index 2b2c61d..47e0b67 100644
--- a/src/jaris/Version.hx
+++ b/src/jaris/Version.hx
@@ -27,9 +27,9 @@ package jaris;
  */
 class Version 
 {
-	public static var NUMBER:String = "2.0.6";
+	public static var NUMBER:String = "2.0.7";
 	public static var STATUS:String = "beta";
-	public static var DATE:String = "13";
+	public static var DATE:String = "19";
 	public static var MONTH:String = "03";
 	public static var YEAR:String = "2010";
 }
\ No newline at end of file
diff --git a/src/jaris/player/Player.hx b/src/jaris/player/Player.hx
index c92764b..6ee8d0b 100644
--- a/src/jaris/player/Player.hx
+++ b/src/jaris/player/Player.hx
@@ -811,7 +811,12 @@ class Player extends EventDispatcher
 		
 		if (_streamType == StreamType.YOUTUBE)
 		{
-			Security.allowDomain("www.youtube.com");
+			Security.allowDomain("*");
+			Security.allowDomain("www.youtube.com");  
+			Security.allowDomain("youtube.com");  
+			Security.allowDomain("s.ytimg.com");  
+			Security.allowDomain("i.ytimg.com"); 
+		
 			_youtubeLoader = new Loader();
 			_youtubeLoader.contentLoaderInfo.addEventListener(Event.INIT, onYouTubeLoaderInit);
 			_youtubeLoader.load(new URLRequest("http://www.youtube.com/apiplayer?version=3"));
@@ -1544,7 +1549,7 @@ class Player extends EventDispatcher
 		
 		if (_streamType == StreamType.YOUTUBE)
 		{
-			if(_youtubeLoader != null)
+			if(_youtubeLoader != null && _mediaLoaded)
 			bytesTotal = Reflect.field(_youtubeLoader.content, "getVideoBytesTotal")();
 		}
 		else if (_type == InputType.VIDEO || _streamType == StreamType.RTMP)
@@ -1569,7 +1574,7 @@ class Player extends EventDispatcher
 		
 		if (_streamType == StreamType.YOUTUBE)
 		{
-			if(_youtubeLoader != null)
+			if(_youtubeLoader != null && _mediaLoaded)
 			bytesLoaded = Reflect.field(_youtubeLoader.content, "getVideoBytesLoaded")();
 		}
 		else if (_type == InputType.VIDEO || _streamType == StreamType.RTMP)

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-javascript/jarisplayer.git



More information about the Pkg-javascript-commits mailing list