silexlabs/Cocktail — Issue #87: HbbTV: ResourceLoaderManager.loadString() security issue
Author: codam
Created: 2011-12-23 09:46:02+00:00
State: open

On Philips & Toshiba TVs, there is an error when trying to get an online file.

cf. testsHbbTV/test_2.3-dynamic_rss_en_ligne_cocktail

The error comes from the following line:
ResourceLoaderManager.loadString( "http://demos.silexlabs.org/cocktail/simple-webapp/XmlProxy.php?url=" + StringTools.urlEncode(xmlUrl), onXmlLoaded, onXmlError);

Which throws following error:
"Reference Error: Security Violation"