2008年10月16日星期四

Flash Player 10 安全更新:相关操作需要用户参与

前些日子本站发布了一个通过使用 Flash 而实现自动复制评论者信息到剪贴板而实现快捷回复评论的功能,但最新 Adobe 发布了最新一代的 Flash Player 10,这个版本的 Flash Player 引入了不少新的安全特性,其中包括了对于一些敏感操作需要用户介入的内容。

新的 Flash Player 10 中,需要上载或下载数据、操作系统剪贴板的操作等都需要用户参与,也就是说要实现类似的“快速回复”功能,必须要让用户点击指定的按钮或设置快捷键才可以解决。这也就意味着之前可以自动操作剪贴板的 Flash 脚本都已失效了。

要或者最新的 Flash Player 10 安全更新方面的信息,请阅读相关参考,或者查看
Understanding the security changes in Flash Player 10

关于剪贴板操作的更新:
SETTING DATA ON THE SYSTEM CLIPBOARD REQUIRES USER INTERACTION

In Flash Player 9, ActionScript could set data on the system Clipboard at any time. With Flash Player 10, the System.setClipboard() method may be successfully called only through ActionScript that originates from user interaction. This includes actions such as clicking the mouse or using the keyboard. This user interaction requirement also applies to the new ActionScript 3.0 Clipboard.generalClipboard.setData() and Clipboard.generalClipboard.setDataHandler() methods.

What is impacted?
This change can potentially affect any SWF file that makes use of the System.setClipboard() method. This change affects SWF files of all versions played in Flash Player 10 and later. This change affects all non-application content in Adobe AIR—however, AIR application content itself is unaffected.

What do I need to do?
Any existing content that sets data on the system Clipboard using the System.setClipboard() method outside of an event triggered by user interaction will need to be updated. Setting the Clipboard will now have to be invoked through a button, keyboard shortcut, or some other event initiated by the user.
鉴于目前 Flash Player 10 的应用还不算普遍,Blog 上的这个回复评论功能暂且留用,之后再做修改。检测 Flash Player 版本的相关信息在此
另推荐大家尽快升级,以体验最新 Flash Player 10 带来的 3D 效果

这俩事儿说起来真够矛盾的。