[FIXED] Flash & crossdomain.xml file.

Added by Nepherkaan almost 6 years ago

Hi all,

I'm getting a 2170 error code when trying to use my flash application from a webserver hosted on Free (it might be somewhere else, i think it's the same). Using this flash in local mode is working well.

After some investigations i felt on this : http://kb2.adobe.com/cps/403/kb403185.html

It seems that there's a new line to add to the crossdomain file to allow the flash player to send request headers on the API server :
<allow-http-request-headers-from domain="*" headers="*"/>

Am i right ? Is it possible ?


Replies (6)

RE: Flash & crossdomain.xml file. - Added by LupusMichaelis almost 6 years ago

This line is a good candidate for darwin awards ;)

If you put it in your Flash, it can become a hole in the UA of your visitors. I guess you have to put that :

<allow-http-request-headers-from domain="atys.ryzom.com" headers="*"/>

RE: Flash & crossdomain.xml file. - Added by Nepherkaan almost 6 years ago

http://atys.ryzom.com/crossdomain.xml, The file come from this server, not from mine.
So, it shall allows incoming-requests from all servers no ? (i hate these security sandbox... ^^)

RE: Flash & crossdomain.xml file. - Added by vl almost 6 years ago

Phantase uses Flex (also made by Adobe) with success with this crossdomain.xml.

I added <allow-http-request-headers-from domain="atys.ryzom.com" headers="*"/> in the crossdomain, tell me if it works better.

RE: Flash & crossdomain.xml file. - Added by Nepherkaan almost 6 years ago

Hi vl,

It's still the same (i've cleaned my cache).
I'm using Flex also (not flash _'). As long as i work on my computer in debug mode, no problem at all. It's only when the release app is hosted on my webserver. This new security depends also on the flash player version as far as i understand.

Would you (for testing purpose) set the <allow-http-request-headers-from domain="*" headers="*"/> as you set it for <allow-access-from domain="*"/> ?

If it's a security hole for you, i will use a custom http service hosted on the same server to get info from the API thru PHP requests.

Thanks,
Neph'

RE: Flash & crossdomain.xml file. - Added by vl almost 6 years ago

done, tell me if it s better

RE: Flash & crossdomain.xml file. - Added by Nepherkaan almost 6 years ago

PERFECT, it's working fine now

(1-6/6)