Flash
 Data Communication

     

HI,

We are struggling with a small problem since the Flash 9 plugin has become available. The website: http://www.impartproductions.com/Jump/ is using a webservice to import data into a flash site.
For some reason the data doesn’t load, due to the crossdomain.xml file security changes flash 9 has made.

Is there anyone who could fix the crossdomain.xml file with the right settings? http://www.importpartners.com/crossdomain.xml

I have tried some things described in this article, but can’t figure it out right…
http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html


thanx in advance

  4 REPLIES
 
Nutrox
1  
Nutrox

Welcome to Ultrashock, D-ziner. ultrashock

If http://www.jumperrecords.com is trying to access http://www.impartproductions.com then give this a try…

<?xml version="1.0" encoding="utf-8" ?> 
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
    <site-control permitted-cross-domain-policies="all"/>
    <allow-access-from domain="www.jumperrecords.com"/>
    <allow-http-request-headers-from domain="www.jumperrecords.com" headers="SOAPAction"/>
</cross-domain-policy> 

Keep in mind that subdomains (i.e. beats.jumperrecords.com) also need to be given access, so depending on how you have things setup you might want to try this version instead…

<?xml version="1.0" encoding="utf-8" ?> 
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
    <site-control permitted-cross-domain-policies="all"/>
    <allow-access-from domain="*.jumperrecords.com"/>
    <allow-http-request-headers-from domain="*.jumperrecords.com" headers="SOAPAction"/>
</cross-domain-policy> 

Let us know how you get on. smilie

  • 07 October 2008 02:33 AM
    •  
D-ziner Author 
2  
D-ziner

Hi,

I’ve changed the crossdomain.xml file like you said and uploaded on http://www.importpartners.com/crossdomain.xml

Unfortunatlly no change on http://www.impartproductions.com/Jump/  :: http://www.jumperrecords.com

I have tried numerous combinations with the domainnames but no luck. Could it be there has to be changed something in the actionscript files? (Website was made with Flash MX)

thnx

  • 07 October 2008 12:16 PM
    •  
D-ziner Author 
3  
D-ziner

This script did the trick:

<?xml version=“1.0” encoding=“UTF-8”?>
<!DOCTYPE cross-domain-policy SYSTEM
“http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd”>
<cross-domain-policy>
  <allow-access-from domain=”*” secure=“false” >
  <allow-http-request-headers-from domain=”*” headers=”*” secure=“false” >
</cross-domain-policy>

  • 13 October 2008 10:43 AM
    •  
Nutrox
4  
Nutrox

Yeah that isn’t very secure though, you are basically granting any SWF from any domain full access to your public website files and services. I will hunt around the Adobe site today to see if anyone else has had problems with Flash MX files.

  • 13 October 2008 11:08 AM
    •