I'm seeing a strange problem with XML.load() in Flash player 8/9 when used with
FireFox. I have a crossdomain.xml file setup which works great for IE 6/7 but
gets blocked completely in FireFox. Here is my scenario:
swf on www.pd.mydomain.com accessing api.pd.mydomain.com with crossdomain.xml
file:
<cross-domain-policy>
<allow-access-from domain="*.pd.mydomain.com"/>
</cross-domain-policy>
This works in the flash debugger env and when I preview in service using IE
but not when in FIreFox. I can in fact see the request come in and 200 for the
crossdomian.xml but not the subsequent request for the feed. Flash seems to
not let it past security and silently fails. I'm wondering if this is due to
any new security features that FireFox has implemented or if I just have the
wrong setup with the cross domain file. I moved my xml api to the same host
(www.pd.mydomain.com) and it worked just fine but I need this api to live in a
different sub domain. Any body seeing similar behavior? Again, this ONLY fails
in FIrefox but works fine in IE.
cinemaguy - 18 Dec 2006 18:24 GMT
You can use the PHP method as a work around. It has always worked great for me in any browser.
http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=tn_16520
jhannus - 18 Dec 2006 19:22 GMT
True I could have a proxy but I'd like to stick to the separate host method so
I can scale accordingly. This is a feature that should work given that there
are is no extra security at the browser level and that the crossdomain.xml is
setup properly. Any thoughts on solving the problem instead of hacking a
workaround? I am unable to find documentation saying there is any difference
in the flash security implementation between IE and Firefox.