topic Re: Crossdomain.xml violation from DynamicLegendWidget in ArcGIS Viewer for Flex Questions

Crossdomain.xml violation from DynamicLegendWidget

StevenHaslemore — Fri, 11 May 2012 01:56:04 GMT

Hi there,

I've just applied SP4 and am having issues with the dynamic legend widget.

I'm getting a Security Sandbox Violation for my secure service.
The legend is working fine for unsecured dynamic services.

The service is secured via a proxy with windows authentication against it adding the token.
I'm running 2.3 flexviewer with some customization.

The service is behaving fine in all other regards.

Any thoughts appreciated.

Cheers,
Steven

Re: Crossdomain.xml violation from DynamicLegendWidget

RobertScheitlin__GISP — Fri, 11 May 2012 11:14:06 GMT

Steven,

I am sure it has something to do with the fact that the widget is not developed to work with secure services. I don't use secure services and thus have not developed my widgets to because I don't have access to a secure service to test against. I will add it to my todo list when some free time becomes available as I was made aware of an esri host secure service I can use for testing when I was a the Developer Summit in March.

Re: Crossdomain.xml violation from DynamicLegendWidget

StevenHaslemore — Sun, 12 Dec 2021 16:02:22 GMT

Hi Robert,

you're quite right, the proxy wasn't being prefixed to the requests.

I've added code in registerMapLayer to add the proxy and it is behaving now.
NB. Have not tested on tiled or feature services.

We had not applied any of the service packs so were on version 10.00, so it was previously using the getAllDetailsResult function.

I'm not sure why it was presenting as a crossdomain rather than an invalid token as the domain should have been good, but working now.

Thanks for all the public work you put out here for us.

Steven


private function registerMapLayer(layer:*):void
{
 var httpServ:HTTPService = new HTTPService();
 var lname:String
 if (layer is ArcGISTiledMapServiceLayer)
 {
  if(layer.version >= 10.01)
  {
   if (ArcGISTiledMapServiceLayer(layer).proxyURL != ""){
    httpServ.url = ArcGISTiledMapServiceLayer(layer).proxyURL + "?" + ArcGISTiledMapServiceLayer(layer).url + "/legend?f=json";
   }else{
    httpServ.url = ArcGISTiledMapServiceLayer(layer).url + "/legend?f=json"; 
   }
   httpServ.resultFormat = "text";
   lname = ArcGISTiledMapServiceLayer(layer).id;
   httpServ.addEventListener(ResultEvent.RESULT,function(event:ResultEvent):void{processLegend(event,lname)});
   httpServ.send();
  }else{
   lname = ArcGISTiledMapServiceLayer(layer).id;
   ArcGISTiledMapServiceLayer(layer).addEventListener(DetailsEvent.GET_ALL_DETAILS_COMPLETE,function(event:DetailsEvent):void{getAllDetailsResult(event,lname)});
   ArcGISTiledMapServiceLayer(layer).getAllDetails();
  }
 }
 else if (layer is ArcGISDynamicMapServiceLayer)
 {
  if(layer.version >= 10.01)
  {
   if (ArcGISDynamicMapServiceLayer(layer).proxyURL != ""){
    httpServ.url = ArcGISDynamicMapServiceLayer(layer).proxyURL + "?" + ArcGISDynamicMapServiceLayer(layer).url + "/legend?f=json";
   }else{
    httpServ.url = ArcGISDynamicMapServiceLayer(layer).url + "/legend?f=json"; 
   }
   httpServ.resultFormat = "text";
   lname = ArcGISDynamicMapServiceLayer(layer).id;
   httpServ.addEventListener(ResultEvent.RESULT,function(event:ResultEvent):void{processLegend(event,lname)});
   httpServ.send();
  }else{
   lname = ArcGISDynamicMapServiceLayer(layer).id;
   ArcGISDynamicMapServiceLayer(layer).addEventListener(DetailsEvent.GET_ALL_DETAILS_COMPLETE,function(event:DetailsEvent):void{getAllDetailsResult(event,lname)});
   ArcGISDynamicMapServiceLayer(layer).getAllDetails();
  }
 }
 else if (layer is FeatureLayer)
 {
  var FeatServId:Number = Number.NaN;
  var msName:String;
  if (FeatureLayer(layer).proxyURL != ""){
   msName = FeatureLayer(layer).proxyURL + "?" + FeatureLayer(layer).url.replace("FeatureServer","MapServer");
  }else{
   msName = FeatureLayer(layer).url.replace("FeatureServer","MapServer"); 
  }
  var x:String = msName.substring(msName.length - 9);
  if(msName.substring(msName.length - 9) != "MapServer")
  {
   httpServ.url = msName.substring(0,msName.lastIndexOf("/")) + "/legend?f=json";
   FeatServId = parseInt(msName.substring(msName.lastIndexOf("/")+ 1));
  }else{
   httpServ.url = msName + "/legend?f=json";
  }
  if(layer.layerDetails.version >= 10.01)
  {
   httpServ.resultFormat = "text";
   lname = FeatureLayer(layer).id;
   httpServ.addEventListener(ResultEvent.RESULT,function(event:ResultEvent):void{processLegend(event,lname,FeatServId)});
   httpServ.send();
  } else {
   lname = FeatureLayer(layer).id;
   getFeatureResult(FeatureLayer(layer).layerDetails,lname);
  }
 }
}

Re: Crossdomain.xml violation from DynamicLegendWidget

StevenHaslemore — Sat, 11 Dec 2021 06:57:47 GMT

Opps, that broke it for non secure services, the proxyURL will be null, not empty string.

private function registerMapLayer(layer:*):void
{
    var httpServ:HTTPService = new HTTPService();
    var lname:String
    if (layer is ArcGISTiledMapServiceLayer)
    {
        if(layer.version >= 10.01)
        {
            if (ArcGISTiledMapServiceLayer(layer).proxyURL){
                httpServ.url = ArcGISTiledMapServiceLayer(layer).proxyURL + "?" + ArcGISTiledMapServiceLayer(layer).url + "/legend?f=json";
            }else{
                httpServ.url = ArcGISTiledMapServiceLayer(layer).url + "/legend?f=json";    
            }
            httpServ.resultFormat = "text";
            lname = ArcGISTiledMapServiceLayer(layer).id;
            httpServ.addEventListener(ResultEvent.RESULT,function(event:ResultEvent):void{processLegend(event,lname)});
            httpServ.send();
        }else{
            lname = ArcGISTiledMapServiceLayer(layer).id;
            ArcGISTiledMapServiceLayer(layer).addEventListener(DetailsEvent.GET_ALL_DETAILS_COMPLETE,function(event:DetailsEvent):void{getAllDetailsResult(event,lname)});
            ArcGISTiledMapServiceLayer(layer).getAllDetails();
        }
    }
    else if (layer is ArcGISDynamicMapServiceLayer)
    {
        if(layer.version >= 10.01)
        {
            if (ArcGISDynamicMapServiceLayer(layer).proxyURL){
                httpServ.url = ArcGISDynamicMapServiceLayer(layer).proxyURL + "?" + ArcGISDynamicMapServiceLayer(layer).url + "/legend?f=json";
            }else{
                httpServ.url = ArcGISDynamicMapServiceLayer(layer).url + "/legend?f=json";    
            }
            httpServ.resultFormat = "text";
            lname = ArcGISDynamicMapServiceLayer(layer).id;
            httpServ.addEventListener(ResultEvent.RESULT,function(event:ResultEvent):void{processLegend(event,lname)});
            httpServ.send();
        }else{
            lname = ArcGISDynamicMapServiceLayer(layer).id;
            ArcGISDynamicMapServiceLayer(layer).addEventListener(DetailsEvent.GET_ALL_DETAILS_COMPLETE,function(event:DetailsEvent):void{getAllDetailsResult(event,lname)});
            ArcGISDynamicMapServiceLayer(layer).getAllDetails();
        }
    }
    else if (layer is FeatureLayer)
    {
        var FeatServId:Number = Number.NaN;
        var msName:String;
        if (FeatureLayer(layer).proxyURL){
            msName = FeatureLayer(layer).proxyURL + "?" + FeatureLayer(layer).url.replace("FeatureServer","MapServer");
        }else{
            msName = FeatureLayer(layer).url.replace("FeatureServer","MapServer");    
        }
        var x:String = msName.substring(msName.length - 9);
        if(msName.substring(msName.length - 9) != "MapServer")
        {
            httpServ.url = msName.substring(0,msName.lastIndexOf("/")) + "/legend?f=json";
            FeatServId = parseInt(msName.substring(msName.lastIndexOf("/")+ 1));
        }else{
            httpServ.url = msName + "/legend?f=json";
        }
        if(layer.layerDetails.version >= 10.01)
        {
            httpServ.resultFormat = "text";
            lname = FeatureLayer(layer).id;
            httpServ.addEventListener(ResultEvent.RESULT,function(event:ResultEvent):void{processLegend(event,lname,FeatServId)});
            httpServ.send();
        } else {
            lname = FeatureLayer(layer).id;
            getFeatureResult(FeatureLayer(layer).layerDetails,lname);
        }
    }
}