Skip to main content
2 of 4
edited tags
Steffen Opel
  • 1.4k
  • 8
  • 14

update crossdomain.xml on stackauth.com and api endpoints to work with current Flash

I am implementing a javascript client that uses the Flash based XHR replacement Flensed in the interest of providing more robust api communication than that provided by JSONP.

Apparently the current flash version does not like the current crossdomain.xml.

The only difference I can see between a policy file that works with Flensed, thus Flash 10, is the inclusion of the xml directive and doc-type. In other words, a semantically correct crossdomain xml file.

Can we deploy the proposed version of crossdomain.xml on stackauth and all api endpoints?

Current:

   <cross-domain-policy>
      <allow-access-from domain="*" />  
      <site-control permitted-cross-domain-policies="master-only"/>  
    </cross-domain-policy>

Proposed:

    <?xml version="1.0"?>
    <!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
    <cross-domain-policy>
      <allow-access-from domain="*" />  
      <site-control permitted-cross-domain-policies="master-only"/>  
    </cross-domain-policy>
Sky Sanders
  • 12.1k
  • 3
  • 32
  • 60