Local shared object: Difference between revisions

Revision as of 11:15, 21 August 2024

Revision as of 11:16, 21 August 2024

Line 16:

Flash cookies, which can be stored or retrieved whenever a user accesses a page containing a Flash application, are a form of local storage. Similar to cookies, they can be used to store user preferences, save data from [[Flash game]]s, or track users' Internet activity.<ref>{{cite web|title=When the cookies crumbled, so did your web anonymity|language=en|website=The Guardian|date=2014-10-04|access-date=2023-12-28|url=https://www.theguardian.com/technology/2014/oct/05/cookies-crumbled-internet-anonymity|archive-url=http://web.archive.org/web/20230605133635/https://www.theguardian.com/technology/2014/oct/05/cookies-crumbled-internet-anonymity|archive-date=2023-06-05}}</ref> LSOs have been criticised as a breach of [[browser security]], but there are now browser settings and addons to limit the duration of their storage.

== Storage ==

Local shared objects contain data stored by individual websites. Data is stored in the [[Action Message Format]]. With the default settings, the Flash Player does not seek the user's permission to store local shared objects on the hard disk. By default, an [[SWF]] application running in Flash Player from version 9 to 11 (as of Sept 1, 2011) may store up to {{nowrap|100 kB}} of data to the user's hard drive. If the application attempts to store more, a dialog asks the user whether to allow or deny the request.<ref name="adobe_sec_wp">{{cite web

|url = http://help.adobe.com/en_US/FlashPlatform/beta/reference/actionscript/3/flash/net/SharedObject.html

|title = ActionScript Documentation Reference for Adobe Flash Platform

|publisher=[[Adobe Systems]]

|date=2011-08-22

|access-date=2011-09-02

}}</ref>

Adobe Flash Player does not allow third-party local shared objects to be shared across [[___domain name|domains]]. For example, a local shared object from "www.example.com" cannot be read by the ___domain "www.example.net".<ref name="adobe-lso" /> However, the first-party website can always pass data to a third-party via some settings found in the dedicated [[XML]] file and passing the data in the request to the third party. Also, third-party LSOs are allowed to store data by default.<ref>{{cite web