Re: [flexcoders] SDK 3.2 upgrade to 3.4 issue
If you do hang back with 3.3 _AND_ are using Flex Builder's automatically generated HTML wrapper, you should be aware that there was a bug discovered in the express-install template files that can expose you to a cross-site-scripting (XSS) attack. Adobe fixed this in 3.4, but with that revision, also introduced the nasty bug with HTTPService responders getting called twice. If you are using the vanilla express-install templates to generate HTML for you, you might want to patch your 3.3 SDK while you wait for 3.5. Here's the relevant links: http://www.adobe.com/support/security/bulletins/apsb09-13.html http://kb2.adobe.com/cps/495/cpsid_49530.html Hope this helps, Jim Cheng EffectiveUI Jake Churchill wrote: > > > Thanks for the info. I was just upgrading to stay current, no particular > reason so I'll hang back on 3.3 for a while until 3.5 is released.
RE: [flexcoders] SDK 3.2 upgrade to 3.4 issue
Thanks for the info. I was just upgrading to stay current, no particular reason so I'll hang back on 3.3 for a while until 3.5 is released. Jake Churchill CF Webtools 11204 Davenport, Ste. 100 Omaha, NE 68154 http://www.cfwebtools.com 402-408-3733 x103 -Original Message- From: flexcoders@yahoogroups.com [mailto:flexcod...@yahoogroups.com] On Behalf Of Jim Cheng Sent: Tuesday, September 22, 2009 5:14 PM To: flexcoders@yahoogroups.com Subject: Re: [flexcoders] SDK 3.2 upgrade to 3.4 issue Yup, something did change for the worse in 3.4 in a show-stopping way. There's a relatively easy workaround for this, just add your own listeners to HTTPService directly and those will only get called once (as opposed to the responder). Try the 3.x branch on opensource.adobe.com if you've brave, or stick with 3.3 for the time being if you can afford to wait for them to roll out the next official build. Here's the bug: http://bugs.adobe.com/jira/browse/SDK-22883 Jim Cheng EffectiveUI Jake Churchill wrote: > > I just installed the 3.4 SDK (previously was using 3.2). I have a > project which uses Cairngorm. I switch the project to the new > compiler version and re-build without any errors. However, whenever I > run the project, all my events get dispatched once (I'm breaking the > code all over to verify) but the result handler in the commands get hit twice. > > > > Did something change regarding event dispatching, AsyncTokens, etc > that would cause this? > > > > FYI, switching back to 3.2 and re-building makes the code run just > fine again. > -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Alternative FAQ location: https://share.acrobat.com/adc/document.do?docid=942dbdc8-e469-446f-b4cf-1e62 079f6847 Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.comYahoo! Groups Links
Re: [flexcoders] SDK 3.2 upgrade to 3.4 issue
Yup, something did change for the worse in 3.4 in a show-stopping way. There's a relatively easy workaround for this, just add your own listeners to HTTPService directly and those will only get called once (as opposed to the responder). Try the 3.x branch on opensource.adobe.com if you've brave, or stick with 3.3 for the time being if you can afford to wait for them to roll out the next official build. Here's the bug: http://bugs.adobe.com/jira/browse/SDK-22883 Jim Cheng EffectiveUI Jake Churchill wrote: > > I just installed the 3.4 SDK (previously was using 3.2). I have a > project which uses Cairngorm. I switch the project to the new compiler > version and re-build without any errors. However, whenever I run the > project, all my events get dispatched once (I’m breaking the code all > over to verify) but the result handler in the commands get hit twice. > > > > Did something change regarding event dispatching, AsyncTokens, etc that > would cause this? > > > > FYI, switching back to 3.2 and re-building makes the code run just fine > again. > -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Alternative FAQ location: https://share.acrobat.com/adc/document.do?docid=942dbdc8-e469-446f-b4cf-1e62079f6847 Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.comYahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/flexcoders/ <*> Your email settings: Individual Email | Traditional <*> To change settings online go to: http://groups.yahoo.com/group/flexcoders/join (Yahoo! ID required) <*> To change settings via email: mailto:flexcoders-dig...@yahoogroups.com mailto:flexcoders-fullfeatu...@yahoogroups.com <*> To unsubscribe from this group, send an email to: flexcoders-unsubscr...@yahoogroups.com <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/