Databases
StackOverflow2013
Postsdbo
POHow to add crossdomain.xml in sub directory
Body
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POHow to add crossdomain.xml in sub directory
    text
    copied!<p>The <a href="http://www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html" rel="nofollow">spec for cross domain policy files</a> says that you can put a the <code>crossdomain.xml</code> file outside the root through the use of a <code>X-Permitted-Cross-Domain-Policies</code> header. How exactly does one go about doing that? I want to put a <code>crossdomain.xml</code> file in a sub directory (I don't have access to the root). This is from page 11 of <a href="http://www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html" rel="nofollow">the spec</a>:</p> <blockquote> <p>When clients require a policy file, they look at the root by default. A domain should always host a master policy file to enforce its intended meta-policy. If a client is instructed to load a policy file other than the master policy file, the client must still check the master policy file to ensure that the meta-policy defined by the master policy file permits the use of the originally requested policy file. </p> <p>Without a master policy file, it is left to the client to enforce the default behavior. Instead of relying entirely on master policy files for meta-policies, clients may also decide to check for a <code>X-Permitted-Cross-Domain-Policies</code> header in documents to specify a meta-policy. In addition to the values acceptable in permitted-cross-domain-policies, this header may also use a value of none-this-response to indicate that the current document should not be used as a policy file despite other headers or its content. Non-master policy files can only grant access to data within their own directory or subdirectories.</p> </blockquote>
 

Querying!

 
Guidance
An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload