The update to Flash 10.1 kills my cross-domain. Formerly, my file looked like this:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-http-request-headers-from domain="www.ue.org" headers="*" secure="false" />
<allow-access-from domain="*" secure="false" />
</cross-domain-policy>
I updated to this based on what I read on this site - not being a security guy, this makes no sense to me:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="by-content-type"/>
<allow-http-request-headers-from domain="www.ue.org" headers="*" secure="false" />
<allow-access-from domain="*" secure="false" />
</cross-domain-policy>
We are using SAP Business Objects Xcelsius, which creates the .swf file that users are using to access our environment. So, I do not have any control over the code base itself. I am limited to fixing the cross domain file, but have no clue what to do. Thanks.
I am using 10.1, and the following cross-domain works without a problem.
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-access-from domain="*" />
</cross-domain-policy>
This cross-domain is as open as it gets.
North America
Europe, Middle East and Africa
Asia Pacific