Note that there are some explanatory texts on larger screens.

plurals
  1. POMaster policy file vs. crossdomain.xml in subdirectories
    primarykey
    data
    text
    <p>I have a swf on localhost which tries to read a text file from another server - example.com. The text file is in a subdirectory as follows: example.com/test/example.txt</p> <p>First here are the contents of the root and the sub-sirectory:</p> <p>www.example.com:</p> <p>/crossdomain.xml</p> <pre><code>&lt;?xml version="1.0"?&gt; &lt;!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd"&gt; &lt;cross-domain-policy&gt; &lt;site-control permitted-cross-domain-policies="master-only"/&gt; &lt;allow-access-from domain="*" secure="false" /&gt; &lt;/cross-domain-policy&gt; </code></pre> <p>/test/crossdomain.xml</p> <pre><code>&lt;?xml version="1.0"?&gt; &lt;!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd"&gt; &lt;cross-domain-policy&gt; &lt;allow-access-from domain="*"/&gt; &lt;/cross-domain-policy&gt; </code></pre> <p>/test/example.txt</p> <p>Now if I explicitly mention in my actionscript as follows:</p> <pre><code>Security.loadPolicyFile("http://example.com/test/crossdomain.xml"); </code></pre> <p>And then load: <a href="http://example.com/test/example.txt" rel="nofollow">http://example.com/test/example.txt</a> in the actionscript. Now the first action should be to check the master policy file under root to check if its meta-policy allows the loading of the crossdomain.xml from the test folder. Since here the meta-policy specifies "master-only", I am assuming the policy file specified by security.loadpolicyfile(), will not be loaded. But my question is after this check will the master policy file allow the access request of the text file from the test folder because of the policy <code>&lt;allow-access-from domain="*" secure="false" /&gt;</code> specified in the master policy file?</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload