Beginning with the Flash Player 7 framework is the use of cross-domain policy files. A policy file is a simple XML file that gives the Flash Player permission to access data from a given domain without displaying a security dialog. When placed on a server, it tells the Flash Player to allow direct access to data on that server, without prompting the user to grant access. The server can be in any location available to the Flash movie and does not have to be in the same domain. Cross-domain policy files, named crossdomain.xml, are placed at the root level of a server. When using a policy file you can use a wildcard character (*) in a domain name.

Note: When serving a policy file, you must not use a cross-domain redirect, or the player will ignore the policy file.

Examples of crossdomain.xml files:

<?xml version="1.0"?> 
<cross-domain-policy> 
<site-control permitted-cross-domain-policies="master-only"/> 
<allow-access-from domain="*.yourdomain.com" /> 
<allow-access-from domain="*.yourdomainsrc.com" /> 
</cross-domain-policy> 

or:

<?xml version="1.0"?> 
<cross-domain-policy> 
<site-control permitted-cross-domain-policies="master-only"/> 
<allow-access-from domain="*" /> 
</cross-domain-policy>

Operating System and Release Information