maps.google.com's crossdomain.xml file is as follows: <?xml version="1.0"?> <!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"> <cross-domain-policy> <site-control permitted-cross-domain-policies="by-content-type" /> </cross-domain-policy> Can you confirm that this effectiv...
I am trying to grab a webpage with actionscript, but keep getting this error (example trying to grab github.com): [SWF] /get-webpage.swf - 2,708 bytes after decompression Error: Request for resource at http://github.com by requestor from http://localhost:4567/get-webpage.swf is denied due to lack of policy file permissions. ...
hey, I write about similar problem but this is other... When I try to consume WCF service in Silverlight I get in Firebug 404 not found error in crossdomain.xml file. But when I add to IIS port by which I use to communicate with service for example http://localhost:11598/Service1.svc and restart IIS of course , I don't get it error - cr...
This is an ActionScript 3 problem... I am hosting a swf on my.domainA and I am requesting a jpg from my.domainB ( of course I'm obsfucating the domain names ) the using this code: var request:URLRequest = new URLRequest(result.image); request.requestHeaders.push(header); var context:LoaderContext = new LoaderContext(true...
I've recently started putting together a Facebook Connect AS3 app and retrieving objects and images through the Graph API. Running anywhere but locally, I receive security errors of the form: SecurityError: Error #2122: Security sandbox violation: Loader.content: xxxx cannot access http://photos-a.ak.fbcdn.net/xxxx.jpg A policy ...
Hi guys... I am trying to add a crossdomain file for my flash project...haven't done it before..and there are not too much information online....Anyone can help me about it??Thanks ...
Guys.. This drives me crazy...I am trying to build a youtube player with flash and everytime I load a video, there is a runtime security sandbox error..I already put crossdomain.xml in my root server http://mysite.com but I am still getting the errors...Do I miss something? Do I have to load it into my flex project??Thanks for the rep...
Hi, I'm having some difficulty getting my cross domain policy to work. I have an swf at http://www.server.com/ that loads in XML and other files. I want to be able to embed that swf in other HTML pages (YouTube stylee) that aren't in the same domain. It works fine when access via it's local server http://www.server.com/my.swf or http://w...
Hi, I've spent quite a bit of time on this so here's where I'm stuck. I'm using the debug player 10.1 to get an XMLA request from: http://localhost/dir/blah.swf to: http://localhost/olapbin/msblah.dll This worked fine in the filesystem, but now its on an IIS7 web server. After a lot of fiddling with the crossdomain.xml file I se...
As far as I understand, the crossdomain.xml file technique for crossdomain XHR is based on Flash. This settings on the server allows Javascript code from the client (using flash) to bypass the Same Origin Policy. I was wondering if that technique doesn't work any more in iPad devices (since they don't support Flash). Does this also impl...
Hi all, I have a flash app hosted at www.example.com that is trying to pull in assets from my Amazon S3 bucket at http://s3.example.com I have a crossdomain.xml file that is world-readable at the root level of the bucket. s3.example.com/crossdomain.xml The contents of that crossdomain.xml file are as follows: <?xml version="1...
Hi, I read a lot about cross-site scripting with Flash, Javascript etc. and also found several lists with websites that have a crossdomain.xml that allows access from any server. For example flickr.com trusts all domains. Can somebody explain me why this seems to be secure and doesn't lead to attacks like session-hijacking? Is it becau...
Hi guys, I have my flash application hosted on a 3rd party domain (flash.example.com )and i'm trying to post data and redirect to my local server. (www.example.com) It will not allow me to do this. I've used the flash debugger and it IS finding the crossdomain see output below. OK: Searching for <allow-access-from> in policy files t...
hey all in brief, i have an application X that uses another application Y in certain cases. X in on an apache server, Y is on a tomcat server. i have a button in html file in Y which calls a js function StopApp(). This function StopApp() calls the script "StopApp.php" which is on X. so what i did inside StopApp() is sthg like functio...
in my flex application: <mx:Image id="imgItem" source="http://notMySyte.com/1.jpg"/> when i run my app, I catch this error: SecurityError: Error #2123: Security sandbox violation: Loader.content: http://mySite.com/2/BusFlex/BusProducts.swf/[[DYNAMIC]]/2 cannot access http://cs9621.notMySite.com/u7397474/c_b51d9fe6.jpg. A policy f...
Hello, 1st the background - so that you see, that I'm not trying anything malicious: I have a flash app in the russian social network vkontakte.ru which displays user avatars. Until now my .swf file has been hosted at their domain, so that fetching and scaling avatars worked well. Now I'd like to switch my app to an iframe-type, so th...
I'm having issues with cross domain access from a Silverlight project to a WCF service in ASP. This tutorial recommends making crossdomain.xml or clientaccesspolicy.xml files and putting them in the web root of the service. I have made these files, and put them in the top level of the project in Visual Studio. I'm still having the prob...
Hi, I have developed a player in AS3. It is working if i provide the IP of the website. But, it is not working when i provide the full domain name. Even, i provide the crossdomain.xml for global access. Please suggest. ...
Dear All, I've changed the protocol for my flex app from https to http and flashplayer still wants to download the crossdomain.xml using https though with the port for http. the app is accessed at http://domain01:8080/flex and it wants to get https:..samedomain..:8080/crossdomain.xml (at https:..samedomain..no_port/flex it works fine). ...
I have updated the crossdomain.xml security settings for my site - but it seems that the older version is being cached in both IE and Chrome. I've checked the headers sent by the server and it's not sending any cache control headers that would be forcing the browsers to be caching crossdomain.xml. In an attempt to get around the issue ...