Crossdomain

Ran into a project where I needed a swf residing on a secure domain to connect to data on a non-secure domain. Looking up all the info online it appeared flash security sandbox was what I had to delve into.

crossdomain.xml file to the rescue!!

The data from the crossfile.xml i used:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" />
</cross-domain-policy>

Now for domain I actually restricted it down to the server where the swf is hosted from, but the * currently in there allows for anyone.

This crossdomain.xml then gets uploaded to the root of the server where the data is being accessed. i.e. if data is in a http://domain.com/data/feed.xml then crossdomain.xml needs to be at http://domain.com/crossdomain.xml