Error #2048: Security sandbox violation

[Emera Trujillo]

Greetings - 

Below, please find details about an issue Visible Measures has encountered recently when attempting to load a DFA VPAID tag with our VPAID host - 

This is the error message Visible Measures is seeing:

"[Error] VPAID Ad SDK Error: Unable to request ads from server. Cause: Error #2048: Security sandbox violation:http://imasdk.googleapis.com/flash/core/3.200.0/adsapi_video_only.swf cannot load data from embedded?channel=vpaidadp.

global code”

For troubleshooting, we've created the test VPAID tag below:

http://ad.visiblemeasures.com/a/2/?pl=218295

Also for troubleshooting, we've created a test page with our player:

http://cdn.visiblemeasures.com/skipstream-demo/?pl=218295

This is the DCM VAST tag we are trying to load:

http://ad.doubleclick.net/ddm/pfadx/N5364.132665VISIBLEMEASURESCORP/B8829233.119859595;sz=0x0;ord=[timestamp];dcmt=text/xml

We are using a cache buster macro, so the tag we have in our ad server is:

http://ad.doubleclick.net/ddm/pfadx/N5364.132665VISIBLEMEASURESCORP/B8829233.119869227;sz=0x0;ord=%%CACHEBUSTER%%;dcmt=text/xml

For this issue, we’ve determined that the following events are occurring prior to the error:

* Visible Measures' VAST is loaded by the VPAID Host

* Visible Measures' VPAID Player loads in the VPAID host

* Visible Measures' VPAID Player loads the third party (Doubleclick) VAST Tag

* Visible Measures' player loads the VPAID media file referenced in the third party (Doubleclick) VAST tag

* The third party (Doubleclick) VPAID loads

* The third party (Doubleclick)VPAID fires the error described above.

In looking at the Flash Debugger output, the call stack of the error is:

at com.google.ads.ima.vpaid::Vpaid1AdSdk/eventHandler()

at flash.events::EventDispatcher/dispatchEventFunction()

at flash.events::EventDispatcher/dispatchEvent()

at MethodInfo-367()

at flash.events::EventDispatcher/dispatchEventFunction()

at flash.events::EventDispatcher/dispatchEvent()

at flash.events::EventDispatcher/dispatchEventFunction()

at flash.events::EventDispatcher/dispatchEvent()

at com.google.ads.ima.loader::AdsLoaderCoreImpl/adDataSourceExhausterAdErrorHandler()

at Function/http://adobe.com/AS3/2006/builtin::call()

at MethodInfo-193()

at flash.events::EventDispatcher/dispatchEventFunction()

at flash.events::EventDispatcher/dispatchEvent()

at com.google.ads.ima.loader::AdDataSourceExhausterImpl/adDataSourceLoadErrorHandler()

at Function/http://adobe.com/AS3/2006/builtin::call()

at MethodInfo-193()

at flash.events::EventDispatcher/dispatchEventFunction()

at flash.events::EventDispatcher/dispatchEvent()

at com.google.ads.ima.common::ErrorUtils$/dispatchAdError()

at com.google.ads.ima.loader::AdDataSourceLoaderImpl/adsLoadErrorHandler()

at Function/http://adobe.com/AS3/2006/builtin::call()

at MethodInfo-193()

at flash.events::EventDispatcher/dispatchEventFunction()

at flash.events::EventDispatcher/dispatchEvent()

at flash.net::URLLoader/redirectEvent()

Although we've been in contact with DCM support, we haven't been able to make much progress.

Thank you,

Emera

[Tyler Sidell (IMA SDK Team)]

Hi Emera,

Thank you for supplying the detailed information.  When I tested your page, I got the following error in the console:

Error: Ad adLoadError error: Unable to request ads from server. Cause: Error #2032 errorCode: 1103

VPAID Ad SDK Error: Unable to request ads from server. Cause: Error #2032

Error #2032 is a stream error usually caused by improper embedding when loading a file.  There are a couple of measures that you can take to resolve this issue.  Please see this documentation for more information.

Feel free to reach out to us if you have any further questions,

Tyler Sidell

IMA SDK Team

[James Reetzke]

Hi Tyler, thanks for looking in to this. I'm helping Emera troubleshoot this issue. 

In this case, the recommended fix (allowScriptAccess = 'always') for #2032 error is already in place (screenshot A). 

The documentation mentions another cause of #2032s could be a "The URL cannot be located or it is blocked." There is a resource that fails to load on the test page - http://cdn.visiblemeasures.com/skipstream-demo/embedded?channel=vpaidadp. This is not a resource Visible Measures' VPAID host is making nor is it a resource/endpoint Visible Measures provides. It looks like the Google VPAID player is requesting this resource and it is using a relative URL to request it. Could this be the cause of the #2032?

Thanks,

James

[Tyler Sidell (IMA SDK Team)]

Hi James,

That very well could be the culprit.  I would take another look at the setup to make sure that you are setting the adTagUrl variable properly.  I've noticed that the following gets called in your player setup:

http://imasdk.googleapis.com/flash/sdkloader/vpaid1video.swf?adTagUrl=embedded&embedAdsResponse=1

Somewhere in your setup you are passing in adTagUrl as embedded instead of 

http://ad.doubleclick.net/ddm/pfadx/N5364.132665VISIBLEMEASURESCORP/B8829233.119869227;sz=0x0;ord=%%CACHEBUSTER%%;dcmt=text/xml

Since the adTagUrl that is being set is not an absolute path nor a proper URL, it is getting added as the relative path to your domain.  Thus, why you are seeing a request made to the following URL:
http://cdn.visiblemeasures.com/skipstream-demo/embedded?channel=vpaidadp

Thanks,

Tyler Sidell

IMA SDK Team

[James Reetzke]

Thanks again for looking into this Tyler. 

The URL for the SWF, including it's query params, are set in the VAST response from Double Click. Since we don't generate it (we're just using the Double Click URL that was provided to us from the client), we don't have a way to adjust the parameters on the SWF. 

To clarify your previous message, the adTagUrl should be "http://ad.doubleclick.net/ddm/pfadx/N5364.132665VISIBLEMEASURESCORP/B8829233.119869227;sz=0x0;ord=%%CACHEBUSTER%%;dcmt=text/xml/embedded", correct? I'm assuming it would be URI encoded as well. 

If the issue is with Double Click's VAST response, is this the appropriate message board to resolve that issue?

Thanks,

James 

[Tyler Sidell (IMA SDK Team)]

Hi James,

Not a problem.  Glad to help you get to the bottom of this.  I do notice in the VAST response:

<MediaFile delivery="progressive" width="320" height="240" type="application/x-shockwave-flash" apiFramework="VPAID">
     <![CDATA[
http://imasdk.googleapis.com/flash/sdkloader/vpaid1video.swf?adTagUrl=embedded&embedAdsResponse=1
     ]]>
</MediaFile>

This looks like an issue with DFP's VAST tag. You could reach out to them through this support form.

Thanks,
Tyler Sidell
IMA SDK Team