2

We have a lot of crossdomain.xml files at my company. Every service that has Flash availability needs one. Keeping them in sync is annoying, so I'd like to be able to have just one crossdomain.xml file hosted somewhere, and then http redirect (302) all the requests to that central location. Is this possible? I can't find documentation anywhere on the web about the rules.

I found one answer here: http://answers.unity3d.com/questions/55288/webplayer-crossdomain-in-sub-directory.html but I am not sure where he gets his info from. I don't see any security reason why a redirect would be disallowed (since you equally have to control the server to get it to serve a redirect as to serve a file). So secondarily, if the answer to this is that you cannot 302, I would be curious as to why not.

Emmett Shear
  • 91
  • 5

1 Answers1

1

I know this question is a little stale, but the answer you found is correct. If the Flash player gets a crossdomain.xml from a 302 redirect, it will ignore it. From Adobe:

Note: When serving a policy file, you must not use a cross-domain redirect, or the player will ignore the policy file.

I've seen it suggested here and here that the thing to do is follow the redirect, and then make a new request, but I've never needed to try it.

Steve Blackwell
  • 5,904
  • 32
  • 49