ASTRA Badge Kit
The Badge Kit is an an XML-based framework for rapid development of small interactive Flash applications. You can learn how to use the Badge Kit very quickly, and most of the usage scenarios require no knowledge of Flash.
Badge Kit Security
Flash Version
Badge Kit requires Flash Player 9.0.45 or above to function correctly. It will not function in Flash 8 or below, and will not render in Flash 9 below rev. 45.Asset Security
The Badge Kit consists of a number of assets: some pre-loaded, and some loaded dynamically. To ensure that a badge cannot be taken over by a malicious third-party, the badge kit has certain requirements for each of the assets associated with it:- badge.swf is the primary file for a badge, hosted by the badge creator. This is the file that website owners embed in their HTML markup, and one that loads all other assets. It is recommended that the JavaScript access is disabled for the badge (AllowScriptAccess parameter set to 'never').
- config.xml is the base configuration file for the badge. It is required that config.xml always have that name and reside in the same web folder as badge.swf. The intent of this requirement is to prevent malicious file substitution.
- content.xml is the main markup file for the badge. Its name and location is specified in config.xml and is not restricted; however, the server where content.xml is hosted must have cross-domain permissions for the server hosting badge.swf. Content.xml can be dynamically generated, if such functionality is necessary.
- External SWF files - these are resource files that are pre-loaded by the badge. These can reside anywhere, as long as proper crossdomain permissions are in place. If these SWF files reside on the same domain as badge.swf, they are loaded into the same security context and can cross-script with the badge; if they are loaded from a different domain, the security context is different and no cross-scripting is possible. This does not have an effect on standard components and services.