HI,

We are struggling with a small problem since the Flash 9 plugin has become available. The website: http://www.impartproductions.com/Jump/ is using a webservice to import data into a flash site.
For some reason the data doesn't load, due to the crossdomain.xml file security changes flash 9 has made.

Is there anyone who could fix the crossdomain.xml file with the right settings? http://www.importpartners.com/crossdomain.xml

I have tried some things described in this article, but can't figure it out right...
http://www.adobe.com/devnet/flashpla...y_changes.html


thanx in advance

[Nutrox]

Welcome to Ultrashock, D-ziner.

If www.jumperrecords.com is trying to access www.impartproductions.com then give this a try...

<?xml version="1.0" encoding="utf-8" ?> 
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
	<site-control permitted-cross-domain-policies="all"/>
	<allow-access-from domain="www.jumperrecords.com"/>
	<allow-http-request-headers-from domain="www.jumperrecords.com" headers="SOAPAction"/>
</cross-domain-policy>

Keep in mind that subdomains (i.e. beats.jumperrecords.com) also need to be given access, so depending on how you have things setup you might want to try this version instead...

<?xml version="1.0" encoding="utf-8" ?> 
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
	<site-control permitted-cross-domain-policies="all"/>
	<allow-access-from domain="*.jumperrecords.com"/>
	<allow-http-request-headers-from domain="*.jumperrecords.com" headers="SOAPAction"/>
</cross-domain-policy>

Let us know how you get on.

[D-ziner]

Hi,

I've changed the crossdomain.xml file like you said and uploaded on http://www.importpartners.com/crossdomain.xml

Unfortunatlly no change on http://www.impartproductions.com/Jump/ :: http://www.jumperrecords.com

I have tried numerous combinations with the domainnames but no luck. Could it be there has to be changed something in the actionscript files? (Website was made with Flash MX)

thnx

[D-ziner]

This script did the trick:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cross-domain-policy SYSTEM
"http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" secure="false" />
<allow-http-request-headers-from domain="*" headers="*" secure="false" />
</cross-domain-policy>

[Nutrox]

Yeah that isn't very secure though, you are basically granting any SWF from any domain full access to your public website files and services. I will hunt around the Adobe site today to see if anyone else has had problems with Flash MX files.