SlideShowPro Account Center: User Forums

bdaily · 2006-09-18 12:45:58

There seems to be some misunderstanding about when and how to use a crossdomain.xml policy file. Hopefully this FAQ will clear some of this up. A crossdomain.xml file (or lack thereof) is the #1 reason for "Slide show works locally but not online" posts here in the forum.

What is a crossdomain.xml file?
With the release of Flash Player 7 a few years back, Macromedia got serious about security mostly because FP7 included quite a bit of new external loading mechanisms. In order to prevent unauthorized access to data via SWFs, they created the need for a crossdomain.xml file, a simple XML file placed at the root of the domain that the data resides on.

Here is an example scenario: We have swf here:

www.domain1.com/my.swf

It tries to access data from an xml file at the following location:

www.domain2.com/data.xml

Before loading the data, the Flash player automatically checks for the existence of a crossdomain.xml file at:

www.domain2.com/crossdomain.xml

NOTE: The crossdomain.xml file resides on the domain where the data lives, not where the SWF lives.

The crossdomain.xml file should contain an entry for the domain trying to load the data, in our case domain1.com:

Code:

<cross-domain-policy>
   <allow-access-from domain="www.domain1.com" />
   <allow-access-from domain="domain1.com" />
</cross-domain-policy>

Notice how we need an entry for with and without the www, more on that next.

But my SWF and Director are hosted on the same domain, so I don't need this, right?
Wrong. One of the quirks is that Flash sees the following two domains as completely unrelated and separate.

www.domain.com
domain.com

Because of this, users who use www. in the domain name will see the slide show, while those who do not won't (or vice versa). To remedy this, crossdomain.xml to the rescue, like so:

Code:

<cross-domain-policy>
   <allow-access-from domain="domain.com" />
   <allow-access-from domain="www.domain.com" />
</cross-domain-policy>

vidaperez · 2006-09-19 22:28:39

Ok, dumb question(s)... Where in my folders would this go? Is this a file I create? If someone has already asked these questions (and had them answered) could someone kindly shove me in the general direction of that thread?

Thanks

Vida

digilee · 2006-09-20 01:49:00

Take this code:

Code:

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
   <allow-access-from domain="domain.com" />
   <allow-access-from domain="www.domain.com" />
</cross-domain-policy>

Paste it into a new, blank text file.
Change "www.domain.com" and "domain.com" to your domains.
Save the file as crossdomain.xml
Upload to the root of your server.

Done.

vidaperez · 2006-09-20 10:14:07

Thank you.

johnb · 2006-09-26 20:52:55

Thanks Brad, that save me some time looking for the solution to my problem.

davidl · 2006-10-10 01:35:44

Ok thanks that works.....However, can I have more than one crossdomian XML? and if so how do I name them or do the names go in the one file?

digilee · 2006-10-11 13:40:25

The URLS all go in the one file:

So you might have:

Code:

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
   <allow-access-from domain="domain.com" />
   <allow-access-from domain="www.domain.com" />
   <allow-access-from domain="domain2.com" />
   <allow-access-from domain="www.domain2.com" />
   <allow-access-from domain="domain3.com" />
   <allow-access-from domain="www.domain3.com" />
</cross-domain-policy>

etc

nevereffect · 2006-10-25 15:44:45

Hello!

I'm experiencing the problems that are described here, but the solutions don't seem to work.
I did all the things with the crossdomain.xml etc...
my swf is there: www.nevereffect.com/ne2006.swf and director is installed there www.halloweenrockfestival.com , crossdomain : www.halloweenrockfestival.com/crossdomain.xml
If you have any idea what it is...
Thanks in advance

Chris

karen · 2006-10-25 16:58:27

nevereffect wrote:
Hello!

I'm experiencing the problems that are described here, but the solutions don't seem to work.
I did all the things with the crossdomain.xml etc...
my swf is there: www.nevereffect.com/ne2006.swf and director is installed there www.halloweenrockfestival.com , crossdomain : www.halloweenrockfestival.com/crossdomain.xml
If you have any idea what it is...
Thanks in advance

Chris

In ur crossdomain.xml

U have to change domain1.com to nevereffect.com and also www.domain1.com to www.nevereffect.com

bdaily · 2006-10-25 17:55:11

Also, your crossdomain.xml must be plain text, it appears to have been created in a Word-like word processor.

nevereffect · 2006-10-26 01:47:10

Hey!
Thanks a lot!! the problem was about "plain text"!!
( I forgot to replace my url in the xml file I showed yeterday, but had already tried it before ;-) was too tired...)
So that's it!! www.nevereffect.com

Chris

newobz · 2006-11-28 21:56:13

I don't understand why all of the sudden my xml path changed to this. I enabled SEF on my joomla backend and the portfolio stopped working...i noticed the xml path changed to crossdomain and I changed it back to the link director generated. I have since disabled SEF and put everything back to the way it was but the swf is not showing up.

Now I have the crossdomain file in the root and changed the domain settings, but it still does not work:

http://www.bowenimagery.com/component/o … /Itemid,8/ is the portfolio link

bdaily · 2006-11-28 22:13:12

Your XML path doesn't change. Leave it set to what it was before. Flash will simply check the crossdomain.xml file to make sure it is allowed to load the data, then continue on to the path you specified in the component inspector.

So, in your crossdomain.xml file, remove all of the SSP XML from the bottom, and make sure it only includes what I have specified above. Then just make sure your flash file is pointed at the correct XML link, as found in the Director dashboard.

newobz · 2006-11-29 12:25:55

weird, i tried this configuration before with an empty cache and refresh and it didn't work. But all is well now, thanks!!!!!!

Jenzo · 2007-02-02 13:27:33

Sorry.. can I maybe add something here..

I couldnt get the crossdomain.xml file to work.. hmm
so I tried adding http:// .. and it worked.

Im not a super coder or anything... but.. for people with problems in this area.. you might wanna try changing what I just mentioned.

cheers!

digilee · 2007-02-02 15:05:52

Jenzo wrote:
Sorry.. can I maybe add something here..

I couldnt get the crossdomain.xml file to work.. hmm
so I tried adding http:// .. and it worked.

Im not a super coder or anything... but.. for people with problems in this area.. you might wanna try changing what I just mentioned.

cheers!

Huh? So what does your crossdomain file look like now?

tarpnman · 2007-02-17 15:23:41

I'm totally a non-coder. I generated the swf & html file in flash, but the preview html file wont' play. The preview flash file plays fine. In the Publish Settings, I directed the flash and html to be saved in a designated folder. Then I uploaded the files to a file on the server. The file happens to be: http://brainerdweb.com/movies/thehearthroom.swf(same path for the html) I cannot see anything from either URL. I do have the crossdomain. xml on the root of the brainerdweb.com, even though the ssp_director resides there as well. Please advise.

digilee · 2007-02-18 16:02:55

This produces a 404 error :
http://brainerdweb.com/movies/thehearthroom.swf

For some reason it's pulling info from sedoparking? is the domain hosted there or are you putting it up for sale?

3xtreme · 2007-04-11 09:32:57

I am using a domain that is forwarded to an IP therefore I have tried various options in the crossdomain file and nothing is working... Looks like I will move this site over to my linux server. ( where SSP is installed )

Here is my xml file:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="suncoastexoticautos.com" />
<allow-access-from domain="www.suncoastexoticautos.com" />
<allow-access-from domain="http://68.178.214.186/suncoast/index.html" />
<allow-access-from domain="http://68.178.214.186/suncoast/" />
<allow-access-from domain="68.178.214.186" />
<allow-access-from domain="http://68.178.214.186" />
</cross-domain-policy>

digilee · 2007-04-11 12:03:53

Change what you have to this and all should be ok:

<cross-domain-policy>
<allow-access-from domain="suncoastexoticautos.com" />
<allow-access-from domain="www.suncoastexoticautos.com" />
<allow-access-from domain="68.178.214.186" />
</cross-domain-policy>

mambadt · 2007-04-13 06:48:54

hi i have problems doing the cross domain thing.

my ssp director is on this server.. dreamsinpictures.net
the swf and html is on this other server.. kozusnicek.com

my xml is as follows..
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="http://kozusnicek.com" />
<allow-access-from domain="http://www.kozusnicek.com" />
</cross-domain-policy>

but the gallery doesn't work at all.
please help!

digilee · 2007-04-13 09:17:48

take these 2 lines out:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">

mambadt · 2007-04-13 18:54:03

hello! thanks for the reply!

i did what i was told still doesn't work.

my xml file is here..
http://dreamsinpictures.net/crossdomain.xml

i checked that it's updated.
but still no progress.

please help!

Thanks!

digilee · 2007-04-13 19:06:06

then add this domain to the file:
dreamsinpictures.net
www.dreamsinpictures.net

mambadt · 2007-04-14 01:45:45

hi,

i added that line.
checked it has been updated.

but still no signs...

are there any things that i should pay attention to?

if i host everything on a single server,
ssp director and the swf file..
it works perfect.

but if i try cross domain.
it disappears.

sorry for the trouble..

Dan

bdaily · 2007-04-14 09:44:35

If your SWF is at kozusnicek.com you need these two lines:

<allow-access-from domain="http://kozusnicek.com" />
<allow-access-from domain="http://www.kozusnicek.com" />

mambadt · 2007-04-15 00:38:52

does it matter is it's at
www.kozusnicek.com/v2

a sub folder etc?

hmm still figuring.
thanks so much for your help!

jpease · 2007-06-03 14:26:03

Hi,

I am attempting to do this, but I am not sure where to put the file, as I have several domains that use SSP. They are all hosted by my site through mediatemple, www.saypease.com so when I connect to my ftp (using transmit) there is a list of folders, one of which is domain. In that is a list of my domains. Do I put it in the first place, folder that lists my domains, or do I make different XMLs for each domain and put them in the html folder of each domain? I am so confused and I'm sorry if this has already been covered, I've read all the previous posts, and I am still not sure what to do. Thanks.

bdaily · 2007-06-03 15:11:20

jpease wrote:
or do I make different XMLs for each domain and put them in the html folder of each domain?

^^ Yes.

jpease · 2007-06-03 15:45:33

Thanks, I got that done. Now I have to figure out why the thumbnails and photos take so long to load at www.avonmotophoto.com/gallery_final.html Any ideas?

Last edited by jpease (2007-06-03 15:47:15)

sx70susan · 2007-06-09 14:27:59

Hi
I've read everything on this post, plus the pdf. info that came with SSP Director. I have the most current Director installed.
I have copied and pasted into a Dreamweaver xml file, saved as crossdomain.xml.
It's been uploaded into the root directory as directed a variety of times and the different ways on this posts suggestion.
My server is gooddogdomains.com which is a spinoff server connected to godaddy.com.

When i try to publish I get this message:
Adobe has stopped a potentially unsafe operation.
The following local application on your computer or network:
/Users/Athena/Sites/slideshow/slideshow.swf
is trying to communicate with this internet-enabled location:
www.davidswann.com
To let this application communicate with the internet, click Settings.
You must restart this application after changing your settings.

I went to adobe through the settings button and said to allows allow for
www.davidswann.com
I constantly get this same window popping up. I have restarted all applications and get same result.

Sorry this is so long, but i was trying to be as descriptive as possible.
Thank You

digilee · 2007-06-09 16:54:54

This has nothing to do with the crossdomain file but with your flash player settings.
Look into using swfobject instead.

sx70susan · 2007-06-09 20:52:01

Hi digilee
Thanks for writing.

I went to the link you posted, and what I'm deciphering is the javascript needs to be embedded in the file, if that's the case I'm not sure where it would go. I am trying to test publish the flash ssp module only. Could it have something to do with the File>Publish settings dialog box?

I'm working on a ProMac Intel with current osx.9 OS and CS3 suite.

thanks

sx70susan · 2007-06-09 21:13:32

Hello again

Well I just tried to relaunch the test again, which gave th Adobe Flash Player Security page. I went to settings button AND reread the info more closely.

The paragraph on: Global security settings for content Creators:
http://www.macromedia.com/support/docum … er04a.html

IT SAYS in part

(Flash Player 8 and later only) To specify that Flash content on your computer may communicate with the Internet:
In the Global Security Settings panel, above, click the pop-up menu and select Add Location

the Add Location box contains a path that looks something like C:\directoryname\filename.swf or
/Users/directoryname/filename.swf

copy and paste the path into the Trust this location box

So I plugged in
/Users/ATHENA/Sites/slideshow/slideshow.html (where my test info is at the moment)

And it Freaking works! WoooHoo

Sorry to bother you, but you know, sometimes everything comes together after bareing your woes to the world.

Maybe on the flipside, someone else is going thru the same thing I did, and I may have saved a soul or two!

zenn · 2007-09-14 02:35:07

Hello

Im having a problm with crossdomain policy (or not ... )
put the crossdomain.xml in fotografia.zenn.com.pt
My director is here fotografia.zenn.com.pt/zenndirector
my slideshow is here www.digital-zoom.net/home

Local the slideshow works online NOTHING

I've tried everthing

PLEASEEE HELPPP

sams · 2007-09-14 08:13:21

I have seen suggestions to remove the following lines from crossdomain files, I don't know if its the anwser, its worth a try

digilee wrote:
<?xml version="1.0"?>

<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">

digilee is the master when it comes to crossdomain files

also the rest of the xml is not well formed try making it notice the /> closing the tags inside the cross-domain-policy tags also I have removed the last entry since it was a sub folder of a domain already listed and not required

Code:

<cross-domain-policy>
<allow-access-from domain="www.digital-zoom.net" />
<allow-access-from domain="digital-zoom.net" />
</cross-domain-policy>

Last edited by sams (2007-09-14 08:17:16)

zenn · 2007-09-14 10:47:14

tKS FOR THE REPLY

BUT .. did not work

:'(

zenn · 2007-09-14 10:49:12

IT WORKS

BUT its tooooooo slow to load ...................

sams · 2007-09-14 13:47:37

my advice wrote:
My advice is Get FireFox & Get FireBug

use the net activity profiler to view the files your project is loading.

sweet and smooth animation;

leodadominico@gmail.com · 2007-10-29 18:17:22

I try using this technique with the crossdomain. I am using:

<cross-domain-policy>
<allow-access-from domain="www.bytuan.com" />
<allow-access-from domain="bytuan.com" />
</cross-domain-policy>

and also

<cross-domain-policy>
<allow-access-from domain="bytuan.com" />
<allow-access-from domain="www.bytuan.com" />
</cross-domain-policy>

Yet it isn't working. Can someone help me?

Thanks,
Tuan

afrmx · 2007-10-29 18:40:04

leodadominico@gmail.com wrote:
I try using this technique with the crossdomain. I am using:

<cross-domain-policy>
<allow-access-from domain="www.bytuan.com" />
<allow-access-from domain="bytuan.com" />
</cross-domain-policy>

and also

<cross-domain-policy>
<allow-access-from domain="bytuan.com" />
<allow-access-from domain="www.bytuan.com" />
</cross-domain-policy>

Yet it isn't working. Can someone help me?

Thanks,
Tuan

Both of them are correct formats, where are you putting this file, and what domains are you using, if there is more than one?

leodadominico@gmail.com · 2007-10-29 18:58:43

afrmx wrote:
leodadominico@gmail.com wrote:
I try using this technique with the crossdomain. I am using:

<cross-domain-policy>
<allow-access-from domain="www.bytuan.com" />
<allow-access-from domain="bytuan.com" />
</cross-domain-policy>

and also

<cross-domain-policy>
<allow-access-from domain="bytuan.com" />
<allow-access-from domain="www.bytuan.com" />
</cross-domain-policy>

Yet it isn't working. Can someone help me?

Thanks,
Tuan
Both of them are correct formats, where are you putting this file, and what domains are you using, if there is more than one?

The file is at http://www.bytuan.com/crossdomain.xml
I am using godaddy, just one domain.

afrmx · 2007-10-29 19:28:37

leodadominico@gmail.com wrote:
afrmx wrote:
leodadominico@gmail.com wrote:
I try using this technique with the crossdomain. I am using:

<cross-domain-policy>
<allow-access-from domain="www.bytuan.com" />
<allow-access-from domain="bytuan.com" />
</cross-domain-policy>

and also

<cross-domain-policy>
<allow-access-from domain="bytuan.com" />
<allow-access-from domain="www.bytuan.com" />
</cross-domain-policy>

Yet it isn't working. Can someone help me?

Thanks,
Tuan
Both of them are correct formats, where are you putting this file, and what domains are you using, if there is more than one?
The file is at http://www.bytuan.com/crossdomain.xml
I am using godaddy, just one domain.

That file was created on word or some text processor, it should be a plain text file, try creating it in textedit or notepad.

leodadominico@gmail.com · 2007-10-29 19:37:11

afrmx wrote:
leodadominico@gmail.com wrote:
afrmx wrote:

Both of them are correct formats, where are you putting this file, and what domains are you using, if there is more than one?
The file is at http://www.bytuan.com/crossdomain.xml
I am using godaddy, just one domain.
That file was created on word or some text processor, it should be a plain text file, try creating it in textedit or notepad.

That's what I used, TextEdit. Paste the code and saved it as xml. Not sure why it is not working...

afrmx · 2007-10-29 19:42:18

In TextEdit on the format menu, select convert to normal text, then save as crossdomain.xml

leodadominico@gmail.com · 2007-10-29 19:44:40

afrmx wrote:
In TextEdit on the format menu, select convert to normal text, then save as crossdomain.xml

Thank you very much. It worked.

cyrano28 · 2008-01-22 12:10:11

Hi all,

using the crossdomain.xml first time and works fine.

may there be a solution in future to be able to put the xml file into another folder than the root directory?
or give them another name?

problem: i use a cms where all xml files will be deleted in root directory except xml called sitemap.xml.
A hint or idea might be nice.

all best
thomas

Last edited by cyrano28 (2008-01-22 12:13:02)

afrmx · 2008-01-22 15:40:52

cyrano28 wrote:
Hi all,

using the crossdomain.xml first time and works fine.

may there be a solution in future to be able to put the xml file into another folder than the root directory?
or give them another name?

problem: i use a cms where all xml files will be deleted in root directory except xml called sitemap.xml.
A hint or idea might be nice.

all best
thomas

The crossdomain file is not a feature or setting of SlideShowPro but Flash itself so there is not much we can do about it.

cyrano28 · 2008-01-22 15:47:34

Hi Antonio,

thank you for your answer.

I guess i need to find another solution, may be a subdirectory...

But fine to know that it is a fact ;-)

salisalaam · 2008-03-06 02:03:00

i have a good one... i'm using a subdomain...

sub1.mydomain.com <-- SWF located in ... http://sub1.mydomain.com/main/my.swf
sub2.mydomain.com <-- SSP located in ... http://sub2.mydomain.com/ssp/

I think I pretty much did everything above and I can't get the file to run correctly. I even added ip addresses. The www.mydomain.com is on yet another server as well as mydomain.com. The XML file was written directly on the server using VIM and permissions are wide open.

Any help is appreciated...

SlideShowPro Account Center: User Forums

#1 2006-09-18 12:45:58

All about crossdomain.xml

Code:

Code:

#2 2006-09-19 22:28:39

Re: All about crossdomain.xml

#3 2006-09-20 01:49:00

Re: All about crossdomain.xml

Code:

#4 2006-09-20 10:14:07

Re: All about crossdomain.xml

#5 2006-09-26 20:52:55

Re: All about crossdomain.xml

#6 2006-10-10 01:35:44

Re: All about crossdomain.xml

#7 2006-10-11 13:40:25

Re: All about crossdomain.xml

Code:

#8 2006-10-25 15:44:45

Re: All about crossdomain.xml

#9 2006-10-25 16:58:27

Re: All about crossdomain.xml

nevereffect wrote:

#10 2006-10-25 17:55:11

Re: All about crossdomain.xml

#11 2006-10-26 01:47:10

Re: All about crossdomain.xml

#12 2006-11-28 21:56:13

Re: All about crossdomain.xml

#13 2006-11-28 22:13:12

Re: All about crossdomain.xml

#14 2006-11-29 12:25:55

Re: All about crossdomain.xml

#15 2007-02-02 13:27:33

Re: All about crossdomain.xml

#16 2007-02-02 15:05:52

Re: All about crossdomain.xml

Jenzo wrote:

#17 2007-02-17 15:23:41

Re: All about crossdomain.xml

#18 2007-02-18 16:02:55

Re: All about crossdomain.xml

#19 2007-04-11 09:32:57

Re: All about crossdomain.xml

#20 2007-04-11 12:03:53

Re: All about crossdomain.xml

#21 2007-04-13 06:48:54

Re: All about crossdomain.xml

#22 2007-04-13 09:17:48

Re: All about crossdomain.xml

#23 2007-04-13 18:54:03

Re: All about crossdomain.xml

#24 2007-04-13 19:06:06

Re: All about crossdomain.xml

#25 2007-04-14 01:45:45

Re: All about crossdomain.xml

#26 2007-04-14 09:44:35

Re: All about crossdomain.xml

#27 2007-04-15 00:38:52

Re: All about crossdomain.xml

#28 2007-06-03 14:26:03

Re: All about crossdomain.xml

#29 2007-06-03 15:11:20

Re: All about crossdomain.xml

jpease wrote:

#30 2007-06-03 15:45:33

Re: All about crossdomain.xml

#31 2007-06-09 14:27:59

Re: All about crossdomain.xml

#32 2007-06-09 16:54:54

Re: All about crossdomain.xml

#33 2007-06-09 20:52:01

Re: All about crossdomain.xml

#34 2007-06-09 21:13:32

Re: All about crossdomain.xml

#35 2007-09-14 02:35:07

Re: All about crossdomain.xml

#36 2007-09-14 08:13:21

Re: All about crossdomain.xml