RE: [flexcoders] SDK 3.2 upgrade to 3.4 issue

2009-09-23 Thread Jake Churchill
: flexcoders@yahoogroups.com [mailto:flexcod...@yahoogroups.com] On Behalf Of Jim Cheng Sent: Tuesday, September 22, 2009 5:14 PM To: flexcoders@yahoogroups.com Subject: Re: [flexcoders] SDK 3.2 upgrade to 3.4 issue Yup, something did change for the worse in 3.4 in a show-stopping way. There's a relatively

Re: [flexcoders] SDK 3.2 upgrade to 3.4 issue

2009-09-23 Thread Jim Cheng
If you do hang back with 3.3 _AND_ are using Flex Builder's automatically generated HTML wrapper, you should be aware that there was a bug discovered in the express-install template files that can expose you to a cross-site-scripting (XSS) attack. Adobe fixed this in 3.4, but with that

Re: [flexcoders] SDK 3.2 upgrade to 3.4 issue

2009-09-22 Thread Jim Cheng
Yup, something did change for the worse in 3.4 in a show-stopping way. There's a relatively easy workaround for this, just add your own listeners to HTTPService directly and those will only get called once (as opposed to the responder). Try the 3.x branch on opensource.adobe.com if you've