0

I get a really strange security error when trying to load data from one URL to another. Essentially my facebook canvas URL points to http://www.tonyamoyal.com/stuff/path/ and that has an fb:swf tag which points to http://www.tonyamoyal.com/stuff/path/Quiz.swf. The facebook app loads fine but when I try to call a service that resides on another URL, I get a security error:

http://www.tonyamoyal.com/stuff/path/Quiz.swf cannot load data from http://www.somedomain.com/path/path/service.aspx

The cross-domain on tonyamoyal.com is set up to allow all domains to pass. The cross-domain on somedomain.com has a line specifically allowing calls from www.tonyamoyal.com:

<allow-access-from domain="www.tonyamoyal.com" />

Any idea why there would be a security issue here?

1
  • is there any chance that you are missing the www part and using just tonymoyal.com in the swf embed tag?
    – Amarghosh
    Oct 23, 2009 at 6:06

1 Answer 1

0

At application startup try to load the policy file by doing:

Security.loadPolicyFile("http://www.somedomain.com/crossdomain.xml");

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.