Friday, January 30, 2009

CorssDomain in Flash Player 10 and 9

The cross domain works differently in flash player 10 and 9.

Sceanrio:
A swf file at location http://url2/Sow.swf make a request to the http://url1:9085/SOW_DSVServices/. As both the files are in different domain, crossdomain.xml file is required.

Flash Player 10.
In flash player 10, crossdomain is required at two location.
1.
http://url1:9085/SOW_DSVServices/crossdomain.xml
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>
2.
http://url1:9085/crossdomain.xml
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
</cross-domain-policy>

3.
In swf file code you have to loadPolicyFile
Security.loadPolicyFile("http://url1:9085/SOW_DSVServices/crossdomain.xml");

While in the case of Flash Player 9, crossdomain.xml file is required at only one location
1.
http://url1:9085/SOW_DSVServices/crossdomain.xml
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>

2.
In swf file code you have to loadPolicyFile
Security.loadPolicyFile("http://url1:9085/SOW_DSVServices/crossdomain.xml");
3.
CrossDomain.xml file is not required at location
http://url1:9085/crossdomain.xml

This is due to the more security enchancement in flash player 10.

No comments:

Post a Comment