Member Avatar for RucGwl

Hi all,

I have created a website and placed it in my domain. But i am getting following 2 errors "550/crossddomain.xml no such file or directory" and
" Error #2044: Unhandled securityError:. text=Error #2048: Security sandbox violation: /public/www/cu3er.swf cannot
load data from config.xml?t=1275979253767.

at Main/::frame2Action()"

Please help me resolve these errors.

Do I need a crossdomain. xml file. If yes then what should be the content of that and where should it be placed.

Thanks....

  • 3 Contributors
  • 2 Replies
  • 189 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by Member #334542

Dani AI

Generated

Short diagnosis and next steps (quick, practical):

Two immediate red flags in your trace are (a) the FTP 550 message referring to "crossddomain.xml" (note the extra “d”) and (b) the SWF being referenced with an ftp:// URL that contains a username. The Flash player looks for a policy file named exactly crossdomain.xml at the root of the host that serves the data the SWF requests; a 550 from the FTP server means that file wasn’t found or accessible. As noted the SWF is trying to load remote data, and was right to point toward a policy file — but check the spelling, location and access first. (adobe.com)

Why the ftp:// form can make this worse:

Flash will attempt to fetch a policy over the protocol the resource lives on; if the policy file requires authentication or isn’t publicly readable the player’s policy request will fail. Serving SWFs/config over HTTP(S) is much simpler: Flash will then look for http(s)://yourhost/crossdomain.xml. You can also use Security.loadPolicyFile(...) from the SWF to point at a non-root policy, but master-only meta-policies and server auth can still block that approach. (cs.vu.nl)

Checklist you can run right now (order matters):

  • Fix the filename/spelling and case (crossdomain.xml exactly), and put it at the root of the host that serves config.xml.
  • Make the file world-readable (no basic auth).
  • Verify from your machine/server: 
curl -I http://yourhost.example/crossdomain.xml

Expect HTTP/1.1 200 OK and a Content-Type of text/x-cross-domain-policy (or another allowed text/xml type). If needed set the header for that single file, e.g.:

<Files "crossdomain.xml">
  Header set Content-Type "text/x-cross-domain-policy"
</Files>

Enable Flash debug logging to watch policy-load attempts and errors. (adobe.com)

If you can’t change the remote host: host the SWF and its config on the same domain or proxy the request server-side (no crossdomain needed). Don’t leave a permissive allow-access-from domain="*" on sites that handle logged-in users — that’s a real security risk. (jamesward.com)

Start with the spelling, protocol (use http/https), and the curl check — those will show the immediate cause.

Recommended Answers

All 2 Replies

Member Avatar for Phaelax

I don't really play with flash, but it sounds like that Shockwave file is trying to access data on another domain. The crossdomain.xml file can possibly take care of this, (uploaded into your root directory) which it doesn't appear you have one.

Give these links a read, should help out.

http://www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html

Member Avatar for Member #334542

Don't worry create a crossDomain.xml in your root directory and give your accessible domain name with their parameters.


1. Create a xml file with the name crossDomain.xml

<?xml version="1.0" ?> 
<cross-domain-policy> 
<allow-access-from domain="*" /> 
</cross-domain-policy>

Sample 2:

<?xml version="1.0" ?> 
<cross-domain-policy> 
  <site-control permitted-cross-domain-policies="master-only"/> 
  <allow-access-from domain="*"/> 
  <allow-http-request-headers-from domain="*" headers="*"/> 
</cross-domain-policy>

2. Paste the crossDomain.xml in your root folder of your website

I hope it will work now!

Edited by Member #334542 because: n/a
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.