Blog of Shigeru Nakagaki. Let's talk about Flex, AIR, ActionScript, ColdFusion and more.

Damn it, Google Safe Browsing shows the alert at my site

Sat, 04 Jul 2009 21:46:00 +0900

If you browse my site with Google Chrome, FireFox and Safari4, it shows the alert at every single link in my site. With IE, it doesn't show the alert. What a wonderful browser is it... How provoking is this! I already requested an re-inspection of my site. No more injection, CrystalTech and Adobe!!

Charge for restoring site which had been altered by recent injection attack

Sat, 04 Jul 2009 15:39:00 +0900

My site had been altered TWICE by recent injection attacks. I'm using a shared hosting and it's CF7. I believe the user of ColdFusion instance is same as other users. I don't believe only my site was altered by the injection attack. Potential ColdFusion security issu And I restore my site from backup TWICE. Then they charged $10 as each restoration fee. The total is $20. I couldn't approve this charge. So I replied to the email, "Why should I pay for your service issue". Then they said "contact our Billing department" for this "dispute". I don't believe this. If you were me, do you pay for this?

CrystalTech CF server had been attacked and my site ...

Fri, 03 Jul 2009 06:31:00 +0900

Yeah.... CrystalTech CF server had been attacked.... And all JavaScript files, HTML files and Application.cfm on MY SITE had been altered. It added JavaScript code which loads virus. I sent emails to CrystalTech support. Then they restored files from backup of the time point on June 30th. The attack details Cold Fusion web sites getting compromised CF8 and FCKEditor Security threat The fundamental cause is ColdFusion (= Adobe) default setting!! ....... ( This was much more horrible than Halloween II )

The real scale Gundam ( 18m = 59.05 ft. ) stood at Odaiba, Japan

Wed, 01 Jul 2009 16:39:00 +0900

I have grown up with Gundam animations. I still like Gundam and I watch Gundam 00 (double o) now. This year is the 30th anniversary of Gundam. So there is a special event in this summer at Odaiba, Japan. 1/1 Real Scale GUNDAM You can view this with larger size. Official Site (Japanese Only) This event is held until August 31. If you love Gundam, don't miss it :)

Adobe Beta Events in Japan

Mon, 22 Jun 2009 07:17:00 +0900

Order By Date 24th, Thu. June, From 18:00 At Osaki, Tokyo Sponsors : Tokyo Flex User Group, Adobe Japan Place : Ohsaki Gate City Holl FlashCatalyst Flex 4, Flash Builder (aka FlexBuilder) ColdFusion 9, ColdFusion Builder LiveCycle Data Service 3 event details 4th, Sat. July, From 15:00 At Hokuriku area Sponsor : Hokuriku Flex User Group Place : Toyama city, Toyama event details 7th, Tue. July, From 13:30 At Osaki, Tokyo Sponsor : Adobe Japan Official Beta Event A Platform Evangelist will talk Place : Ohsaki Gate City Holl Flash Platform FlashCatalyst Flex 4, Flash Builder (aka FlexBuilder) event details 9th, Thu. July, From 19:00 At Shinsaibashi, Osaka Sponsors : Osaka Flex User Group, Adobe Japan A Platform Evangelist will talk Place : Live and Bar 11 Flash Platform FlashCatalyst Flex 4, Flash Builder (aka FlexBuilder) event details Come and Get the latest information!

Please fix wmode problems of Flash Player

Fri, 05 Jun 2009 11:51:00 +0900

Flash Player can be transparent by "wmode" parameter. The values are "opaque" and "transparent". If you use only English or the flash content doesn't support "input", it's fine. However, if you want users to input non-English letters, there is a critical problem. The problem is "Can't type non-English letters". * Strictly . . . you can't input non-English letters by inline with IE. you can't input non-English letters with non-IE. Here is a sample. Transparent Flash This problem has existed for a long time much. I want Flash Player team to fix this bug very very much. How about you? If you want this bug to be fixed, go and vote for it. Cannot type non-English/foreign characters in Flex app when wmode set to 'opaque' or 'transparent'

FileReference throws IO error on uploading zero-byte file

Wed, 27 May 2009 07:31:00 +0900

I was making a batch upload feature. That uploads all files recursively in a directory which a user selected. Then I got this error. FileReference throws I/O Error on uploading zero byte file In some system and application, sometimes it needs zero-byte files. It's not big needs, but I believe there is some needs. Also on HTML, "input type='file'" can upload zero-byte file. So this should be a bug of Flash Player, right?

FireFox 3.0.x is so unstable !!

Fri, 22 May 2009 23:24:00 +0900

It seems that FireFox goes more unstable on each minor version-up :( The most exasperating crash is that FireFox crashes when I'm writing a blog!! When I was writing a little long blog, I sometimes open new tabs to find information. Then suddenly it's happened. Yeah, FireFox crashed. And we can restart FireFox with the last opened sites. However, the blog content was gone!! How provoking!! Also I'm worry about that FireFox 3 uses so much memories. And the start-up is much slower than IE. What's wrong with FireFox team!? # And also there are FlashPlayer issues. There is the second option. It's The Google Chrome. It's first and light. I like that. However it sometimes behaviors clumsily. And unfortunately the Google Chrome can't handle some Japanese characters and some web-site aren't displayed correctly. The worst thing I don't like is that the sound is very small. I don't view the YouTube with Google Chrome though they are smae Google products. The third option is IE8. I use IE8 when I view the YouTube, Yahoo! music, MTV and when I debug Flex applications.

JQuery Dialog issue on IE8

Tue, 19 May 2009 05:27:00 +0900

jquery dialog test on IE8 I tested this page with FireFox 3, Google Chrome, Safari and IE8. Only on IE8, the size of the jquery dialog is not correct. And you will know odder behavior after drag & drop.

Is this a bug of the great IE8?

Updated around 14:00, 19th May, 2009 I found a workaround. It's like this.

The top-level engineers in Japan started up JActionScripters.com.

Tue, 19 May 2009 00:36:00 +0900

JActionScripters.com The purpose of this site is to introduce Japanese Flash contents to the world by the Japanese Flashers who are top-level engineers in Japan. There are some people who spoke at FITC 2008. Check this out!!

Huge bug of headerRenderer of DataGrid

Sat, 18 Apr 2009 12:29:00 +0900

A long time ago, Marcin Janiak logged a bug about DataGrid headerRenderer as SDK-14571. But this bug is still living and it is annoying me. I figured out why headers blink. One big problem is DataGrid.invalidateDisplayList function. override public function invalidateDisplayList():void { super.invalidateDisplayList(); if (header) { header.headerItemsChanged = true; header.invalidateSize(); header.invalidateDisplayList(); } if (lockedColumnHeader) { lockedColumnHeader.headerItemsChanged = true; lockedColumnHeader.invalidateSize(); lockedColumnHeader.invalidateDisplayList(); } } header.headerItemsChanged is set in "true" regardless of the reason why the function is called. What a violent code it is! Then DataGridHeader re-creates headers at updateDisplayList function. override protected function updateDisplayList(w:Number, h:Number):void { allowItemSizeChangeNotification = false; // make new ones var cols:Array = visibleColumns; if (headerItemsChanged && (cols && cols.length > 0 || dataGrid.headerVisible)) { Another big problem is that all header are re-created twice on CollectionEvent.COLLECTION_CHANGE. Try this sample (click CheckBox of each cell). DataGridHeaderTest (with "View Source") Please vote for this if you don't like this bug SDK-14571. And here is my wish. Please don't inherit codes from this DataGrid in Gumbo. Current codes of DataGrid is so awful. The author of DataGrid might be genius. But the codes which only genius can read are useless.

RSL bug at cross-domain environment

Sat, 18 Apr 2009 11:43:00 +0900

If you set RSL path like "/rsl/framework_3.3.0.4852.swz" and the site is "http://www.adobe.com", FlexFramework try to download RSL from "http://www.adobe.com/rsl/framework_3.3.0.4852.swz". This is okay if SWF domain is same as browsed domain by browser. I mean ... The user browses "http://www.adobe.com" and SWF is loaded from "http://www.adobe.com". But if the user browses "http://www.microsoft.com" and SWF is loaded from "http://www.adobe.com", RSL is not downloaded. And RSL error is displayed if there is no cache. Because FlexFramework tries to download RSL from "http://www.microsoft.com/rsl/framework_3.3.0.4852.swz". There is a workaround. It's okay when you set RSL path like "http://www.adobe.com/rsl/framework_3.3.0.4852.swz". But I think RSL should be loaded from the relative path in this case. I mean... If we set RSL path like "/rsl/framework_3.3.0.4852.swz", FlexFramework should download RSL from the related path of SWF even if user browse any sites. I logged this bug as SDK-20653. Please vote for this if you don't like this bug.

Can not get Adobe feeds from Flash?

Mon, 30 Mar 2009 16:42:00 +0900

Current crossdomain.xml of feeds.adobe.com is following xml

But I can not get feeds from SWF. I got a security error. I guess Adobe needs to edit something like this.

# headers="*" Isn't it? Cross-domain policy file specification Arbitrary headers are not sent from Flash Player to a remote domain

Have you ever succeeded in RSL with Flex SDK 3.3?

Sat, 14 Mar 2009 10:10:00 +0900

I tried to use RSL of Flex SDK 3.3. But it said... Failed to load RSL framework_3.3.0.4852.swz Failing over to RSL framework_3.3.0.4852.swf Flex Error #1001: Digest mismatch with RSL http://localhost/Adobe/200903/Hoge/framework_3.3.0.4852.swf. Redeploy the matching RSL or relink your application with the matching library. It seems that RSL was signed with wrong signature, right? I logged this as SDK-19876 I hope I'm wrong or this will be fixed very soon.

LCDS+CF DataManagement scalability is very very small

Fri, 06 Mar 2009 03:07:00 +0900

If there are huge data in target table, Java heap error happens. Even if you call fill method with parameters, Java heap error happens if the result data has many recordset. # I tested by one million data or more. Also it loads all data into Flex app on sort. You know it eats huge memory resource. LCDS + CF DataManagement scalability is very very small. Don't use it with large data. Also there are a couple of critical bugs. The quality is not enough for real business. You'll have many troubles.