clientaccesspolicy.xml

How to evade Silverlight cross-domain security law?

how to evade Silverlight cross-domain security law? This point is one that I need to go round Cross-domain calls - Browser or Client - Allowed when it is configured per client access policy file hosted on server. Any ways? Articles? Libs? ...

Call external XAP from local SL app -> CrossDomain issue

Hy everyone. I want to load a Xap file located on a server from a Silverlight application running in a local winforms browser application. The html site for the browser control is located on the client machine. The problem is I can't download the foreign xap file, I always get a security exception. On the server there is a clientacces...

How do I write a secure ClientAccessPolicy.xml file?

I'm using a ClientAccessPolicy.xml file that I think allows pretty much all access to my WCF service: <?xml version=""1.0"" encoding=""utf-8""?> <access-policy> <cross-domain-access> <policy> <allow-from http-request-headers=""*""> <domain uri=""*""/> </allow-fr...

clientaccesspolicy.xml and subdomain

my site has a subdomain, I use this policy with my silverlight app, <?xml version="1.0" encoding="utf-8" ?> <access-policy> <cross-domain-access> <policy> <allow-from http-request-headers="*"> <domain uri="http://dev.system-engine.com"/&gt; </allow-from> <grant-to> <resource path="/" include-subpaths="true"/> </gr...

Silverlight and clientaccesspolicy.xml

I have a silverlight app hosted on "dev.system-engine.com" which creates an tcp connection connecting to "dev.system-engine.com" the silverlight app and the policy file are on the "dev.system-engine.com" webserver. "system-engine.com" and "dev.system-engine.com" are separate servers. I cannot seem to get it to work. I have been strugg...

Silverlight clientaccesspolicy.xml bug? or design?

In the domain node of a clientaccesspolicy file you can specify a wildcard for a sub domain or protocol, but it would appear not for a port. Specifically when developing, if the service consumed is hosted on a third party, then access from a local debug version of a silverlight app running on the localhost asp.net development server wor...

Looking for a simple interface for users to enter data for Silverlight application

I have made a Silverlight application which can read data from various URLs. So users of the application who control a website can: FTP text and XML files onto their website put a clientaccesspolicy.xml in their root directory enter their URL in the silverlight application at which point the silverlight application then begins read...

What are the security implications of making a clientaccesspolicy proxy workaround?

I wanted to use published GoogleDocs documents and twitter tweets as the datasource of a Silverlight application but ran into clientaccesspolicy issues. I read many articles like this and this about how difficult it is to get around the clientaccesspolicy issue. So I wrote this CURL script and put it on my PHP site and now I can get th...

Distinguish between clientaccesspolicy.xml failure and untrusted cert in Silverlight

Does anyone know of a clever way to distinguish between an error communicating with a server due to a missing or invalid clientaccesspolicy.xml file vs. a server presenting an untrusted or self-signed certificate? This is a Silverlight 3 application talking to a self-hosted WCF service on a server. Currently both cases are returning the...

Where to place ClientAccessPolicy.xml for Local WCF Service?

I'm trying to create a basic WCF Service and Silverlight client. I've followed the following tutorial: http://channel9.msdn.com/shows/Endpoint/Endpoint-Screencasts-Creating-Your-First-WCF-Client/ Since Silverlight 4 was incompatible with the WSHttpBinding, I changed it to BasicHttpBinding. Unfortunately I keep getting this error now: ...

Silverlight WCF netTcpBinding problem

Trying to call a WCF with a netTcpBinding via Silverlight, I am getting the error: "TCP error code 10013: An attempt was made to access a socket in a way forbidden by its access permissions.. This could be due to attempting to access a service in a cross-domain way while the service is not configured for cross-domain access. You may nee...

Silverlight Socket

I am trying to connect a Silverlight client to a socket server and continue to get the following error: An attempt was made to access a socket in a way forbidden by its access permissions. I believe I need to specify a clientaccesspolicy.xml through either the socket server or the http://:80/clientaccesspolicy.xml path with the...

How can I get my WCF service's client access policy operation to be accessible from the root?

I have the following operation for hosting my client access policy in my WCF service: [OperationContract] [WebGet(UriTemplate = "/clientaccesspolicy.xml")] XElement RetrieveClientAccessPolicy(); public XElement RetrieveClientAccessPolicy() { String policy = @"<?xml version=""1.0"" encoding=""utf-8""?> <access-po...

How to debug WCF service with Silverlight

I have two solutions, one is the WCF service and the other one is the Silverlight. I would like to use the debugger on both solutions at the same time. The debugger for the WCF service automatically starts a ASP.NET development server. However, I have a hard time making my Silverlight client connecting to the ASP.NET development server. ...

Silverlight can't talk to HTTPS web service?

I've got a Silverlight app that talks to an HTTPS web service. On most machines it works fine, however, on some machines it fails consistently. On the machines it fails on, I receive a SecurityException when making a WebClient request to the HTTPS web service. The SecurityException itself doesn't give me any clues as to why it's reall...

Silverlight - ClientAccessPolicy.xml Syntax

I'm trying to communicate with an Apache web server in a cross-domain way. I have a clientaccesspolicy.xml file set up on the root of the domain and it is successfully retrieved by the Silverlight client when attempting to make a GET request to a Java servlet that's been set up. The specifics are something like this: URL to access: de...

How do you build a clientaccesspolicy.xml for this API?

I have a RESTlike API that I want to access from Silverlight. It needs to support the following: All requests are made over SSL Allow GET, POST, PUT, DELETE (or just any) Allow any request headers Allow requests from any host Pretty much wide open. I'm a little confused by the docs so does anyone have an example of what it might look...

how to specify all ports in client access policy file - silverlight

How do I specify a wildcard '*' for the ports in a client access policy file? If I want to specify multiple ports in the following file is there anyway to do this using a wildcard instead of explicitly listing each server: <?xml version="1.0" encoding="utf-8"?> <access-policy> <cross-domain-access> <policy> <allow-from http...

Silverlight cross-scheme access to jpegs denied

Hello. I've got a Silverlight4 app that I'm running on https, deployed to Azure. Everything's working except for one small glitch. I've got content in the form of jpg thumbnails and associated zip files with a .gld extension. My app is supposed to display the thumbnails, and allow the users to download the associated .gld/zip files. ...