Home/ Questions/Q 33509
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-10T13:55:55+00:00

I have a Flex swf hosted at http://www.a.com/a.swf . I have a flash code

  • 0

I have a Flex swf hosted at http://www.a.com/a.swf. I have a flash code on another doamin that tries loading the SWF:

_loader = new Loader(); var req:URLRequest = new URLRequest('http://services.nuconomy.com/n.swf'); _loader.contentLoaderInfo.addEventListener(Event.COMPLETE,onLoaderFinish); _loader.load(req);

On the onLoaderFinish event I try to load classes from the remote SWF and create them:

_loader.contentLoaderInfo.applicationDomain.getDefinition('someClassName') as Class

When this code runs I get the following exception

SecurityError: Error #2119: Security sandbox violation: caller http://localhost.service:1234/flashTest/Main.swf cannot access LoaderInfo.applicationDomain owned by http://www.b.com/b.swf.     at flash.display::LoaderInfo/get applicationDomain()     at NuconomyLoader/onLoaderFinish()

Is there any way to get this code working?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. This is all described in The Adobe Flex 3 Programming ActionScript 3 PDF on page 550 (Chapter 27: Flash Player Security / Cross-scripting):

    If two SWF files written with ActionScript 3.0 are served from different domains—for example, http://siteA.com/swfA.swf and http://siteB.com/swfB.swf—then, by default, Flash Player does not allow swfA.swf to script swfB.swf, nor swfB.swf to script swfA.swf. A SWF file gives permission to SWF files from other domains by calling Security.allowDomain(). By calling Security.allowDomain(‘siteA.com’), swfB.swf gives SWF files from siteA.com permission to script it.

    It goes on in some more detail, with diagrams and all.

    • 0