What is Crossdomain.xml

Similar Questions

• What does "REQUEST_URI = crossdomain.xml" mean?

  When my site receives a 404 error I sent it to me. I see this a lot sometimes...

  'REDIRECT_URL = crossdomain.xml.

  (see below for the code). What it means? I know it has to do with the Flash in some way.

  HTTP_REFERER = desktop.htm

  HTTP_USER_AGENT = Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.4 (KHTML, like Gecko) Safari/537.4 Chrome/22.0.1229.94

  LAST_MODIFIED =

  PATH = / bin: / bin

  QUERY_STRING =

  REDIRECT_STATUS = 404

  REDIRECT_URL = crossdomain.xml

  Flash requires a cross-domain policy file. Cross-domain policy files allow to control the types of resources and requests Flash Player can do when you talk to your server.

  You can read more details on the different policy files that obeys Flash Player here:

  http://www.Adobe.com/devnet/flashplayer/articles/flash_player10_security_wp.html

• Urgent: crossdomain.xml location on Weblogic 10.3.3.0

  Guys,
  
  Pls tell me where to put the file crossdomain.xml on weblogic server.
  I want to access this file in this way: http://localhost:7001 / crossdomain.xml
  
  Can anyone how? also, if any WAR needs to be updated, then what is the name of the WAR file? How can I update and redeploy?
  
  Thank you
  Aerts

  I don't know if it will however work according to the link:

  http://msdn.Microsoft.com/en-us/library/cc197955%28V=vs.95%29.aspx

  It is written "save the crossdomain.xml file to the root of the domain where the service is hosted. If, for example, the service is hosted in http://fabrikam.com, then the file must be located at http://fabrikam.com/crossdomain.xml. »

  Try to create a Web - App simple 'test' and deploy in the same or the server that hosts the Web service.

  1 ' essay' contains 'web - inf' & 'crossdomain.xml '.

  2 ' web - inf' contains

  WebLogic.Xml
  ------------

  
  /

  Web.Xml
  -------

  3. deploy to the servers hosting the Web service.

  4. in doing so, you should be able to access the http://hostname:port / crossdomain.xml.

  Hope this helps

  -Akshay

• IOError in IE but not in Firefox (problem possible crossdomain.xml)

  Yesterday I debugged If all goes well a problem that happens for our application in Internet Explorer but not in Firefox.

  This has to do with access to remote content from a separate domain.

  In all aspects, it SEEMS to be a problem of crossdomain.xml, but the fact that this arrises only problem in IE is what prompted me to post here.

  We have a solution in progress (in the bureaucratically speaking), but I want to check here.

  Our application is the field of "a.domain".

  It access a file xml on 'b.domain/xml/ '.

  And finally (this is the tricky part) it also accesses an xml file to "b.domain/forwardingPath/" which is actually transmitted to the 'c.domain/xml/ '.

  The crossdomain.xml is located at "b.domain/crossdomain.xml".

  The application of "b.domain/xml/anXMLFile.xml" works without any problem.

  The demand for the 'b.domain/forwardingPath/anotherXMLFile.xml' exists in Firefox but not in IE (remember, ACTUAL demand is sent to "c.domain/xml/anotherXMLFile.xml").

  In Internet Explorer, I get an IOError.

  I think that we need a proper crossdomain.xml file, also located in the "c.domain/crossdomain.xml" and put in this request.  I want to confirm is whether this interpretation is correct.  I'm not at all a person on the server side.  It's all of the elves and fairies for me.  And then finally, why the hell is this inconsistent behavior between IE and Firefox?  The version of flash player Firefox violates its own safety standards?

  I swap this in the stack overflow.  field-xml-issue http://StackOverflow.com/questions/7395931/ioError-in-IE-but-not-in-Firefox-possible-Cross

  I have ping our developers on this subject and this is what they have to say:

  "We did some work for the plugin around redirects andhence the correct behavior on Firefox.

  As far as I KNOW, on IE we don't get the redirection messages and may not participate in the decision-making process of security during redirection scenarios. This behavior is beyond our control.

  There is a workaround solution described in the AS3docs here: http://help.adobe.com/en_US/FlashPlatform/reference/actionscript/3/flash/system/LoaderCont ext.html #checkPolicyFile

  Here's the relevant paragraph:

  Be careful with checkPolicyFile if you are downloading anobject from a URL that can use HTTP redirects on the server side. Arealways policy files comes from the corresponding initial URL that you specify inURLRequest.url. If the final object comes from a different URL because of the HTTPredirects, the initially downloaded policy files might not applicableto the of the object's final URL, which is the URL that matters in security decisions. If you are in this situation, you can examine the value of ofLoaderInfo.url after receiving an orEvent.COMPLETE ProgressEvent.PROGRESS event, which tells you the final URL of the object. Then call the method theSecurity.loadPolicyFile () with a URL based on the object URL policy file ' sfinal. Then query the value of LoaderInfo.childAllowsParent until it becomes true. »

  Chris

• HTTPService to localhost does not work in Flex4... Even with crossdomain.xml

  So, it worked before I recompiled with Flex4, (in Flex 3.5) and now I can't get the following to work...

  History:

  I use httpservice in flex as:

  "" < mx:HTTPService id = "methods" url = "http://localhost/parser.php"method = "POST" showBusyCursor = "true" resultFormat = "e4x" result ="xmlresultHandler (event)" fault = "faultHandler (event)" / > "

  Everything is in my directory on my web server. When run in debugging or directly from flashbuilder, the call works fine. If I ran a release build, FTP in/var/www rejection (my roots) and try to access the server, the site pulls upward, and the series of swf files, but I always get a

  Fault: Channel .Security .error

  FaultString: 'error of security to access the url.

  faultDetail: ' Destination: DefaultHTTP.

  When it tries to read the httpservice.

  I have a crossdomain.xml file in my folder/var/www (webroot) with what I see as a permissive super settings... Below:

  <? XML version = "1.0"? >
  <! DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd" > ""
  < cross-domain-policy >
  "< allow-access-from domain =" "*" ports = "*" / >
  < site permitted-cross-domain-policies of control = 'all' / >
  "< allow-http-request-headers-from domain =" "*" headers = "*" / >
  < / cross-domain-policy >

  Any help would be GREATLY appreciated.

  You may need to set the - use-network = false compiler option.

  Project - Properties - Flex Compiler

  Add the option - use-network = false for the ' additional compiler arguments: "section.

  When deploying on a live server, you probably need to recompile it with the option - use-network = true.

  Who knows, maybe in your situation, it must be set to true.

  If this post answers your question or assistance, please mark it as such.

  Greg Lafrance - Flex 2 and 3 certified ACE

  www.ChikaraDev.com

  Training Flex and Support Services

• Flickr API &amp; crossdomain.xml

  My flickr stream does not load on the page. I use the following code to make it work:

  Security.allowDomain ("http://api.flickr.com/crossdomain.xml");
  Security.loadPolicyFile ("http://api.flickr.com/crossdomain.xml" "");

  I've also always allowed in the HTML. Is there a problem with this code?

  This error is legitimate, because there is no System.security - syntax in the original post is correct.

  Why do you think that you cannot flow because of security problems? What kind of property listen you?

  Also, I noticed that the address a "1" prefix. If they redirect requests to different servers - you have to get the strategy of the corresponding address too. The battery1 policy will not work if the asset is farm2, farm3, etc..

• Domain name in the crossdomain.xml file

  Hello

  I have a Flex application that accesses data from an external system that is hosted by a 3rd party. We want to maintain a crossdomain.xml on this system, but not sure what should be the name of the system.

  We have 3 out of the intellectual property and in the file corssdomain should be the outgoing our IP domain or IP address from our local server on which flex is running, or both.

  Please give me advice.

  Thank you

  Colinet

  It should be everything that can appear after http:// in the URL for sovereign wealth funds

  Alex Harui

  Flex SDK Developer

  Adobe Systems Inc..

  Blog: http://blogs.adobe.com/aharui

• What is an xml file and how to find a missing one?

  What is an xml file? How to find one that is missing?

  In short, an XML file is a file structured data - in other words, it stores the data in a way that is easy for a computer scan and read, but it is also easy(-ish) for a human to read, too.

  Generally, XML can be used for configuration or preference data, or for the exchange of data between applications, but there are a multitude of possibilities.

  This means that, with regard to the resolution of your problem is concerned, that was no help. The whole point of XML is that it is easy for any application store some data he needs, so you need to be more specific on what application you are using and what XML file it is looking for. Only then can someone (possibly) steer you in the right direction.

• Crossdomain.XML Flash attack is still possible?

  In my business, we have some security issues related to the injection of code on our websites (XSS).

  I would like to know if a simiar to http://code.google.com/p/doctype-mirror/wiki/ArticleFlashSecurityPolicyAttack attack is always possible.

  I have a few issues this topic:

  1. the policy domain (crossdomain.xml) always files analyzed forgivingly by Flash, or was it more strict approach implemented since the publication of the article?

  2. How will I know if a policy file is valid or not, especially if it's injected a wrong xml or html, or image file?

  3. the important HTTP headers when Flash Player checks if downloaded, cross-domain policy files are valid?

  Thank you in advance,

  Mariusz Lewandowski

  Hi Mariusz,

  The information contained in the article that you referenced are really, really old.  While the article was published in 2011, the problems described around rigorous political file have been set back to 2007/2008.  Gradually, we have made a number of changes to address all of the issues between Flash Player 9 and Flash Player 10.

  There is a good overview of the changes here:

  http://www.Adobe.com/devnet/flashplayer/articles/fplayer9-10_security.html

  A comprehensive guide to the use of cross-domain securely in the Flash Player 10 Security white paper policy files can be found here:

  http://www.Adobe.com/devnet/flashplayer/articles/flash_player10_security_wp.html

  Finally, the Adobe Secure Software Engineering Team (ASSET) has published a guide on the deployment in any security policy files that you might find useful:

  http://blogs.Adobe.com/asset/2009/11/securely_deploying_cross-domai.html

  Please let me know if you have other questions or concerns.

  Thank you
  Henry Clark

  Quality engineering - Runtime Flash security manager

• crossdomain.XML for subdirectory level

  Hello

  We must deploy crossdomain.xml on our Web server, but the host name remains the same across different Web sites.

  How can we add restrictions to the sub-directoty (website1) level?

  the URLS are like below, now how do I add striking restriction only for website1?

  www.mysite.com/content/WebSite1/test.html

  www.mysite.com/content/website2/test.html

  www.mysite.com/content/website3/test.html

  e, g,

  <? XML version = "1.0"? >

  <! DOCTYPE cross-domain-policySYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd" > ""

  < cross-domain-policy >

  "< allow-access-from domain ="www.mysite.com"safe ="false"/ >"

  < allow-access-from domain = "mysite.com" safe = "false" / > "

  < / cross-domain-policy

  Thank you!

  at the level of your root use crossdomain.xml:

  http://www.Adobe.com/XML/DTDs/cross-domain-policy.DTD">

  and in a subdirectory that you want to allow access, use crossdomain2.xml:

  http://www.Macromedia.com/XML/DTDs/cross-domain-policy.DTD">

• FileReference - crossdomain.xml - restrict access to all MY Flex application?

  I have a Flex application based on the web (domain A) concerning must download files on the desktop of the user FROM an external server (domain B). I use Adobe FileReference class to do this. Now, I know that I need a file crossdomain.xml to the external server in domain B to establish trust between the Flex application and the server download. In the end, I need any user to any domain to have access on the server download for the cross-domain file must specify:

  allow-access-from domain="*"
  
  But this will open up acess to the downloadble files to any flex app out there on the web . Is there a way to restrict access to just MY Flex app in the
  crossdomain.xml file?
  
  thx in advance!
  
  -MC

  Why do you need any user to any domain access?

  Anyone using your web application will be in area a. unless you count should the swf for others to download from their servers (which woiuld be strange)

  the field is the place where its hosted

• Flex Mobile + crossdomain.xml

  OK, so here's a fun one for you.

  I have a webservice that calls the mobile application.  It works fine on a http://localhost/... run, but when tests on the device, the device cannot interpret the localhost.

  Which means I have to:

  1.) put the webservice on a domain (completed)

  2.) make a crossdomain.xml file?

  <? XML version = "1.0"? >
  < cross-domain-policy >
  < site permitted-cross-domain-policies of control = "master only" / >
  < allow-access-from domain = "*" / >
  < / cross-domain-policy >

  I mean, the domain must be "*" because mobile applications can be anywhere...

  Does anyone have any idea on this?  I tried to use the webservice on my domain server, but nothing helped.

  I had the same problem and I have just set.
  The phone do not translate the hostname to an IP address.
  So instead of http://localhost/webservice.asmx?wsdl put http://192.168.0.1/webservice.asmx?wsdl (where 192.168.0.1 is the ip address of your local host)

• Problem crossdomain.xml

  Good afternoon

  I have a web app in flex 3 which, on a server "http://SRV-XXX:8181/relflex/main.html" and in the application, I reached by HTTPService " http://SRV-XXX:8181/SL_SISFLEX/slSRV05"(my Servlets).
  When you access the site with 'http://SRV-XXX:8181/relflex/main.html' works normally, but when I "http://172.1.0.6:8181/relflex/main.html" does not work and error # 2048

  (mx.messaging.messages: errorMessage) # 0
  body = (null)
  clientId = "DirectHTTPChannel0".
  correlationId = "0D499AD7-FE29-95E7-9B5A-B2062705750F."
  destination = «»
  extendedData = (null)
  faultCode = "Channel.Security.Error".
  faultDetail = "Destination: DefaultHTTP.
  faultString = "error of security to access the url.
  headers = (Object) # 1
  DSStatusCode = 0
  MessageId = "F4BCF095-DD0B-8739-5057-B2062734F478."
  rootCause = (flash.events: SecurityErrorEvent) # 2
  bubbles = false
  cancelable = false
  currentTarget = (flash.net: URLLoader) # 3
  bytesLoaded = 0
  bytesTotal = 0
  data = (null)
  dataFormat = "text".
  eventPhase = 2
  target = (flash.net: URLLoader) # 3
  Text = "error # 2048: Violation of the safe area: http://172.1.0.6:8181/relflex/main.swf cannot load data from http://SRV-XXX:8181/SL_SISFLEX/slSRVXXX? db = relflex & parameterDataSource = % S 5FPOD USP.»
  Type = "securityError".
  timestamp = 0
  timeToLive = 0

  I try to use the link in the crossdomain.xml as http://SRV-XXX:8181/relflex/crossdomain.xml:

  <? XML version = "1.0"? >
  <! DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd" > ""
  < cross-domain-policy >
  < site-control permit-cross_domain-policing = 'all' / >
  < allow-access-from domain = "" * "ports =" * "/ >"
  < allow-access-from domain = "srv - XXX" ports = "8181" / >
  < allow-access-from domain = "172.1.0.6" to-ports = "8181" / >
  < / cross-domain-policy >

  And in the application I'm call-> flash.system.Security.loadPolicyFile ("http://SRV-XXX:8181/relflex/crossdomain.xml");

  You can help me to solve the problem of the call of 172.1.0.6:8181 and SRV - XXX:8181?

  TKS!

  Paulo David

  If you can, try the default configuration where you put the crossdomain.xml file in the root and not the relflex subfolder.

  Alex Harui

  Flex SDK Developer

  Adobe Systems Inc..

  Blog: http://blogs.adobe.com/aharui

• Just crossdomain.XML doesn't work do not

  Hello
  
  I have move my request to my Local computer problems to a development/TEST server for testing. My application uses c# Web Services to access data and a Flex front-end.
  
  Here is the error I get (only on the development/TEST server):
  
  An error occurred communicating with the server.
  Error message: HTTP request error
  Faul Code is: Server.Error.Request
  Lack of detail is: error: [IOErrorEvent type = "ioError" bubbles = false cancelable = false eventPhase = 2 text = "Error #2032: stream error."] "URL: http://DOMAIN/APPLICATION/WebService.asmx" URL: WebService.asmx
  
  Exactly the same configuration works on my local machine. I have a crossdomain.xml in place file that looks like this:
  
  <? XML version = "1.0"? >
  <! DOCTYPE cross-domain-policy (View Source for full doctype...) >
  -cross-domain-policy >
  < site permitted-cross-domain-policies of control = 'all' / >
  < allow-access-from domain = "' * ' course ="fase"/ >"
  "< allow-http-request-headers-from domain =" "*" headers = "*" course = "fase" / >
  < / cross-domain-policy >
  
  However, I don't think the crossdomain is actually necessary, because there is demand on the same domain and directory as the webServices. But, I added one anyway, because every google search seems to say that the HTTP request error: Server.Error.Request is a problem of crossdomain.xml.
  
  Little, I thought it might be a permission error. However, I have the web page, run as an 'application' and user account for the application has permissions to the root directory and all it's children files/directories (so he can read the crossdomain.xml) and also the identity of the application has access to run all selects them.
  
  Unfortunately I am running this on IIS6 on the machine of dev/TEST and IIS7 on my local machine. So I can't set up the failed request tracking to see if I can find the problem there.
  
  Does anyone have any help that they can share? I spent the full day try everything I can think of to make it work with no will.
  
  Any help would be greatly appreciated!
  
  Thank you!!
  -Mike

  It turns out that the problem was that the Application Pool identity did not have access to the SQL DB do CRUD. I guess you should never be too sure of things. -= o /

• I need a crossdomain.xml file?

  I worked on my first Flex application, and he designed several structures menu based on data coming from external XML files. Everything works correctly when you run the project in Flex Builder, but when I move the build directory (/ bin) to another location, it does not load my menus. I have discovered it is because of the configuration of security projects build directory gets and to get my files to work elsewhere, I'll need a crossdomain.xml file.
  
  After reviewing the operation of the crossdomain.xml files I wonder if in my case I should even need one because the files load my SWF will be already placed on the local machine - not a server. Yet, the application does not work so I tried a crossdomain.xml even when using the following code:
  
  
  <? XML version = "1.0"? >
  <! DOCTYPE cross-domain-policy SYSTEM " http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd" >
  
  < cross-domain-policy >
  < allow-access-from domain = "192.168. * "safe ="false"/ >".
  < / cross-domain-policy >