views:

56

answers:

0

Hi guys,

I have my flash application hosted on a 3rd party domain (flash.example.com )and i'm trying to post data and redirect to my local server. (www.example.com)

It will not allow me to do this. I've used the flash debugger and it IS finding the crossdomain see output below.

OK: Searching for <allow-access-from> in policy files to authorize data loading from resource athttp://www.example.com/addtocart.php by requestor fromhttp://flash.example.com/swf/myflash.swf?

OK: Request for resource athttp://www.example.com/addtocart.php by requestor fromhttp://flash.example.com/swf/myflash.swf? is permitted due to policy file athttp://www.example.com/crossdomain.xml

within the flash code we are also explicitly setting Security.allowDomain("http://www.example.com")

This definitely seems like a crossdomain security issue but I can't figure it out. Anybody have any clues?

Thanks

UPDATE:

As requested here is the crossdomain.xml file:

<cross-domain-policy>
<allow-http-request-headers-from domain="*.example.com" headers="*" />
<allow-access-from domain="*.example.com" />
</cross-domain-policy>