Fixing your CrossDomain.xml File
I was working on the next episode of The Flex Show's Fifteen Minutes With Flex and came across an issue I thought was worthy of a blog post.
The episode will talk about XML and as an example I was writing some Flex code to grab the RSS feed from the Flex Show. This was giving me a run time warning in the debugging console. This was the error:
Warning: Domain www.theflexshow.com does not specify a meta-policy. Applying default meta-policy 'all'. This configuration is deprecated. See http://www.adobe.com/go/strict_policy_files to fix this problem.
This was my file:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>
I brought up the Adobe Dev center article and read through it. Unfortunately, this was full of background and reasoning and I could not find an easy fix. On page 2 of the article, I found a link to the xsd definition. I parsed through it using my developer brain and was able to cobble together a solution. I added two tags to the crossdomain.xml file, site-control and allow-http-request-headers-from. This removed the debugger warning. Here is the final file:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all" />
<allow-access-from domain="*" />
<allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy>
Back to work!
I've tried subscribing to the video shows and loading them on my iPhone. But get an error. Been to busy to research into it. But just wanted to check with you as to whether the video podcast was iPod/iPhone compatible.
The URL in the warning really should go to a KB article which includes a sample file. Not a 6+ page dissertation. I had the same problems with the article as you.
Glad to have helped!
1. Immediately: fix the bug that's not allowing me to connect to load data from the server using HTTPService no matter how many times I feed the crossdomain.xml file.
2. Immediately: get an overview of Flash security and
3. As time permits: understand why I made a fool out of myself in a presentation when I used "Export Release Build" for a demo that I thought would have worked easily with the debugger.