Myspace is disallowing flash objects totally it seems, all profiles not updated still show objects, but try saving your profile again and watch your embed tags turn into " .. type="application/x-shockwave-flash"


This is really aggravating, I hope to something that this is some sort of local problem.

I updated my profile today and found my objects I created in flash and got elsewhere transformed from...

<embed allowScriptAccess="never" allowNetworking="internal" enableJSURL="false" enableHREF="false" saveEmbedTags="true" src="http://www.fileden.com/files/2006/8/17/172651/Message.swf" enableJavaScript="false" allowScriptAccess="never" allowNetworking="internal" menu="false" quality="best" scale="noscale"

bgcolor="" wmode="transparent" width="550" height="400" name="Messages" align="middle" allowScriptAccess="never" type="application/x-shockwave-flash"

pluginspage="http://www.macromedia.com/go/getflashplayer" />



to...



.. type="application/x-shockwave-flash" data="http://www.fileden.com/files/2006/8/17/172651/Message.swf" height="400" width="550" align="middle">
<param name="movie" value="http://www.fileden.com/files/2006/8/17/172651/Message.swf" />
<param name="allownetworking" value="internal" />
<param name="allowScriptAccess" value="never" />
<param name="enableJSURL" value="false" />
<param name="enableHREF" value="false" />
<param name="saveEmbedTags" value="true" />
<param name="menu" value="false" />
<param name="quality" value="best" />
<param name="scale" value="noscale" />
<param name="bgcolor" value="" />
<param name="wmode" value="transparent" />
..>



what the ****, Myspace....

somebody explain the reasoning of this to me, please...

(message to myspace: if you haven't found a way for 500,000 people to remove their pages and stop using your service then I don't know what will)

This post has been edited by thetruefiziks: 18 Jan, 2007 - 10:45 AM

I have to admit I was quite skeptical that MySpace would disallow Flash items on their pages, as that's a big ticket item for a lot of its users. However, you indicated that it was being replaced with '..' which means they are. I've noticed there are a lot of things MySpace is started to sterilize (trying editing a style by id on something, it escapes the # sign...).

The .. is MySpace's way of telling you what you've put in is illegal (they used to just delete it, so you had no idea what's going on). This may be related to the constant security issues with Flash.

I'm wondering what the residual effects of this will be. They seem to be sterilizing the wrong data now. Google for "Myspace XSS" and you'll see that they sterilize data without understanding the repercussions of it. Go figure. Maybe you ought to just ride it out, as they'll probably retract that from their sterilizer script.

rockstar_

Currently they are only filtering updates and have not globally replaced existing embeds - so hopefully they are just filtering temporarily. In the past when they've taken a disliking to something they've removed it from existing profiles too.

ok.. Apparently it's "fixed" now. A bit frustrating replacing "alllllll" the tags again, guess that's what I get for not backing up the page :]

am I the only one still having this problem ??? errr!!! all my embed are changed to <object> once again.. lost my backgroudn music.. how LAME!! anyone figure out a way/trick around this yet ?? come on, you guys are genious's :0