Search code examples
apache-flexflashsecuritysandboxcrossdomain.xml

Can I access crossdomain files outside the originally requested domain?

Flash Player 10 specifies:

"Redirects to policy files outside the originally requested domain will continue to cause policy files to be ignored by Flash Player."

Is there a way to access policy files outside the domain?

Solution

  • I don't fully understand your question.

    A policy file on a given domain (no matter the exact path) can only give access on that domain and subdomains.

    Using Security.loadPolicyFile, you can load it from an arbitrary URL on that domain, but you cannot grant access to domain B with a policy file from domain A.

    Edit:

    If you could give access to B from A, being the owner of A, this whole policy thing would be pointless. You would serve the swf from A and serve a policy file that grants access to B from A, so why have policy files anyway?