Is it just me or shouldn't the following client access policy allow anyone to do anything?
<?xml version="1.0" encoding="utf-8" ?>
<access-policy>
<cross-domain-access>
<policy>
<allow-from http-request-headers="*">
<domain uri="*" />
</allow-from>
<grant-to>
<resource include-subpaths="true" path="*" />
</grant-to>
</policy>
</cross-domain-access>
</access-policy>
I just created it and placed it at http://localhost/clientaccespolicy.xml and my web service still yields an exception with the message: CrossDomainError
Is there something else I need to do?