590368 - me comunica con internet explorer sin quererlo

Status: RESOLVED INVALID

(Firefox :: General, defect)

Description

[Javier]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.127 Safari/533.4
Build Identifier: 3.6.8

al tener abierto el mismo sitio en internet explorer y firefox al hacer clic en un botón realiza la misma acción en los dos exploradores

Reproducible: Always

Steps to Reproduce:
1.abrir internet explorer y firefox
2.ingresar al sitio web www.inmobiliarialossilos.cl
3.hacer clic en la grilla y cambiaran los dos exploradores 



Hola soy un webmaster independiente y me di cuenta de este error avísenme cuando vean el vídeo para borrarlo de esa web, saludos!
Nota: hice este video que muestra el momento en que sucede el error
http://www.inmobiliarialossilos.cl/firefox

Comment 1

[Daniel Veditz [:dveditz]]

Google does a somewhat poor job with this:

   having opened the same site in Internet Explorer and Firefox as set by
   clicking button performs the same action in the two browsers
   Reproducible: Always 
   Steps to Reproduce: 
   1.Open Internet Explorer and Firefox 
   2. accessing the website www.inmobiliarialossilos.cl 
   3.Make click the grid and change the two explorers

   Hello I am an independent webmaster and I noticed this error
   let me know when you see the video to delete it from that page,
   greetings! Note: I made this video showing what happens when the
   error http://www.inmobiliarialossilos.cl/firefox

I can't really tell what the video is supposed to be showing, but it doesn't look like an exploit.

Comment 2

[Daniel Veditz [:dveditz]]

Reporter sent me mail with additional details (in the future please don't -- keep the info in the bug where all the contributors can see it. That's why bugmail always starts "Do not reply to this email. You can add comments to this bug at...").

Apparently the video is showing that you really have Explorer and Firefox open at the same time, it's not just side-by-side for comparison. In IE he clicks on the "Jardin Poniente, Renca" picture, and the action will happen in the Firefox instance of Flash.

What's the mechanism here? Flash isn't like some media players where the plugin is just a shim back to a separate master process. Where is the shared state? Is one flash content sending out events that another one can read? Even in another Window in another process entirely? Does this mean a malicious flash app could try to send events out to get another flash app to do things? Or is there some same-origin checks going on, at least?

CC'ing adobe guys. Is this a bug or as designed?

Comment 3

[Javier]

Ok, contestare por este medio, para los chicos de adobe estoy ocupando el siguiente código:

En el boton 
___________________________

on (press) {

	var sending_lc:LocalConnection = new LocalConnection();
	sending_lc.send("demoConnection","printOut",("2.4.2"));
	inpTexto.text = "contacto_renca_58.swf";
	enviar_contacto();
}


Y en el receptor:
______________________________
conexion = new LocalConnection ();

conexion.unMetodo= function (argumento) {
//contenedor = 
campoDeTexto.text = argumento;
loadMovie(argumento,contenedor_contacto);
loadMovie("",contenedor_banner);
}

conexion.connect("nombre_de_la_conexion");


pueden ver el video explicativo aca:
http://www.inmobiliarialossilos.cl/firefox
saludos

Comment 4

[Javier]

emmm, Daniel for finding this bug will not win me a shirt?

Comment 5

[Javier]

??

Comment 6

[Charles]

I cannot reproduce this and could use a little more detail on what version of the browsers you are using as well as the versions of Flash Player.

LocalConnection will allow two swf's to talk to one another in the same or different browsers. If the swf in Firefox is sending and the swf in IE is listening then this will be the expected behavior.

Comment 7

[Javier]

ok,
firefox: 3.6.8
explorer version: 8.0.7600.16385
flash player: WIN 10,1,53,64
opertating system: windows 7


then it is normal to happen, being in firefox and clicking the button to contact
explorer?

Comment 8

[Charles]

Depending on how you have localConnection setup between swf files this could be as expected.  If its setup this way I would expect you would see it between browser windows in the same browser as well.

Did this start happening after you updated Flash Player or something you noticed after changing some code?

Comment 9

[Javier]

emmm, no, the problem is in almost all versions of adobe flash
player
this code was my idea to communicate the two swf but within
the same browser but from what I see with whom they communicate well
are ou

on (press) {

    var sending_lc:LocalConnection = new LocalConnection();
    sending_lc.send("demoConnection","printOut",("2.4.2"));
    inpTexto.text = "contacto_renca_58.swf";
    enviar_contacto();
}

Comment 10

[Charles]

You might consider using a unique name per session for the connection.  This would prevent the same page in a different browser getting the action.  Just a thought to help you along.   This isn't a player or Mozilla bug so I'll be resolving the issue.

Comment 11

[Javier]

ok, Carlos Muchas Gracias ;) thanks anyway

Comment 12

[Charles]

mucho gusto

Comment 13

[Robert O'Callahan (:roc) (email my personal email if necessary)]

A patch for bug 590568 mentions this bug by mistake.

Comment 14

[Javier]

good, hope is solved! jejej