You may also need allowScriptAccess in the HTML page in order to use
addCallback. See the docs.
You may need a crossdomain.xml on otherdomain.com in order to access the
AllowDomain allows your SWF to open the door for other content, but
allowScriptAccess and crossdomain.xml are how HTML pages and servers open
their doors and let your SWF in.
So you're saying that if I have a facebook app that hosts a Flex
application, there's no way to have the facebook page interact with it
doesn't specify the domain from which I'm serving the swf? (The SWF
is served from an amazon cloudfront domain.)
allowDomain, so it should be possible if you control the js and the swf.
A server's door is controlled by crossdomain.xml
We have allowScriptAccess="always" and we are still getting security error on facebook when trying to set the ExternalInterface.callback()
What is the full text and stack trace of the error?