You do not need crossdomain.xml for loading SWFs from different domains, this is not restricted. The only restriction which applies in this case concerns the control of the loaded movie. If the domain of the loader differs from that of the loadee, the loader is not allowed to access anything inside the loaded movie (variables, functions, etc.) until the loadee allows it by calling System.security.allowDomain() or allowInsecureDomain() and passing the loaders domain as the parameter.
Attila =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= From: Matt Muller <[EMAIL PROTECTED]> To: Flashcoders mailing list <[email protected]> Date: Monday, July 23, 2007, 2:12:44 PM Subject: [Flashcoders] Cross domain policy's and loading child SWF's --====----====----====----====----====----====----====----====----====----===-- Hi, I am building a video player which loads its player skin from domainA.com. The player can be embedded on an external domain, domainB.com. Is there a way of not using a cross domain policy file to load the child swf in? You will never know which domain the parent is in and it just seems a security risk to use a wildcard in the cross domain policy file. Thanks MaTT _______________________________________________ [email protected] To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= _______________________________________________ [email protected] To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
