It seems to me that Flash goes about cross-domain scripting in a
rather nice way.  That's probably the only good thing you'll ever hear
out of me about Flash.

Check out /crossdomain.xml files.  Flash checks the /crossdomain.xml
file to see if the target site has an explicit exception for the site
your flash is running on to make cross-domain calls.  It'd be lovely
if browsers would implement this for AJAX as well as it seems like a
simple an elegant solution to a common problem.

Here's a sample for those who might not be familiar with the joys of
flash:

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy
  SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd";>
<cross-domain-policy>
  <allow-access-from domain="www.yoursite.com" />
  <allow-access-from domain="yoursite.com" />
  <allow-access-from domain="*.hersite.org" />
</cross-domain-policy>

--~--~---------~--~----~------------~-------~--~----~
Chromium Discussion mailing list: [email protected] 
View archives, change email options, or unsubscribe: 
    http://groups.google.com/group/chromium-discuss
-~----------~----~----~----~------~----~------~--~---

Reply via email to