User Guide

Full-screen mode security 465
An addition to those APIs on the previous list, the following APIs are also prevented when
allowNetworking is set to "none":
■ sendToURL()
■ FileReference.download()
■ FileReference.upload()
■ Loader.load()
■ LocalConnection.connect()
■ LocalConnection.send()
■ NetConnection.connect()
■ NetStream.play()
■ Security.loadPolicyFile()
■ SharedObject.getLocal()
■ SharedObject.getRemote()
■ Socket.connect()
■ Sound.load()
■ URLLoader.load()
■ URLStream.load()
■ XMLSocket.connect()
Even if the selected allowNetworking setting permits a SWF file to use a networking API,
there may be other restrictions based on security sandbox limitations, as described in this
chapter.
When
allowNetworking is set to "none", you cannot reference external media in an <img>
tag in the
htmlText property of a TextField object (a SecurityError exception is thrown).
Full-screen mode security
Flash Player 9.0.27.0 and later support full-screen mode, in which Flash content can fill the
entire screen. To enter full-screen mode, the
displayState property of the Stage is set to the
StageDisplayState.FULL_SCREEN constant. For more information, see “Working with full-
screen mode” on page 173.
For SWF files running in a browser, there are some security considerations.