Jump to content

Recommended Posts

Posted

I've never really heard of .swf files being very insecure in the dramatic way you describe. In fact, I haven't really heard of .swf security issues at all. Is it really that bad?
Do you have a myspace account?

Think of it this way: swf's can execute any javascript commands. They can dump cookies, sessionid's, and - if something's wrong on your end - inject and execute code.

If the dev's took anything out that wasn't related to mouseovers or the like, then I wouldn't have a problem with it. If they just make a swf viewer, though, then there would be a problem.

But yes, get it working properly and that would add a whole 'nother element of awesome (or awesomely cheesey =D) to HUDs.

Posted

Do you have a myspace account?

Think of it this way: swf's can execute any javascript commands. They can dump cookies, sessionid's, and - if something's wrong on your end - inject and execute code.

The sky is falling!

SWF is just a file format and it's pretty much open. My assumption is their going to include code to open and interact with the SWF files in game as they wouldn't be able to embed the current flash player into the engine.

The game isn't a browser, there is no Javascript interpreter in it to execute Javascript for a start and I doubt things like file operations and code execution is going to work either.

More than likely they'll take an open-source SWF lib and just use a sub-set of it's code to allow vector based, interactive HUD elements that communicate event's back to the engine via LUA or something. Thats's how I'd do it.

Posted

Do you have a myspace account?

Think of it this way: swf's can execute any javascript commands. They can dump cookies, sessionid's, and - if something's wrong on your end - inject and execute code.

The sky is falling!

SWF is just a file format and it's pretty much open. My assumption is their going to include code to open and interact with the SWF files in game as they wouldn't be able to embed the current flash player into the engine.

The game isn't a browser, there is no Javascript interpreter in it to execute Javascript for a start and I doubt things like file operations and code execution is going to work either.

More than likely they'll take an open-source SWF lib and just use a sub-set of it's code to allow vector based, interactive HUD elements that communicate event's back to the engine via LUA or something. Thats's how I'd do it.

Sounds good, but in that case, why not just use SVG? It's a whole lot easier to edit.

I'm down for it either way, though.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...