Today I headed up to the Adobe SF office to interview Justin Everett-Church about the recent controversial changes to the FileReference class. Justin is the Senior Product Manager for Flash Player and in the interview he talks about the reasons for the change as well as ways that we could have possibly handled things better.
I found out a few things today that make things much clearer to me. First, this wasn’t based on a theoretical security threat but instead on actual security reports that we received. Unfortunately we cannot divulge the specifics of the attacks, but they are real. As for communication, the main issue was that we didn’t spend enough time communicating to the AJAX community who are primarily the ones affected by this change. Anyway, listen to the interview for more details.
Please also read this article for more details on the changes. Feel free to leave your opinions in the comments but I’m moving on. The reasoning makes sense to me and the workarounds are actually quite easy. Now on to those other complaints
.
Lee