Geek Answers Handbook

Sandbox security violation: lack of permissions for policy files

I am using as3httpclientlib to send data to a web service, but I am constantly getting the following security violation. Does anyone know how to solve this? My crossdomain.xml file is below the security alert.

NOTE. . I use apache for proxy requests to the web service, so the destination URL / port and the URL serving the applet are the same - i.e. http://192.168.100.101 . In addition, the crossdomain.xml file is located in the root directory of the web application that serves the applet, not the web service; however, since requests are proxied, the file URL is http://192.168.100.101/crossdomain.xml

* Security Sandbox Violation * Connection to 192.168.100.101:80 stopped - forbidden http://192.168.100.101/com-web/flex/ComUi.swf Error: request for resource in xmlsocket: //192.168.100.101: 80 by requestor from http://192.168.100.101/com-web/flex/ComUi.swf is denied due to the lack of a permission policy file.

 <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd"> <cross-domain-policy> <allow-http-request-headers-from domain="*" headers="*" secure="false" /> <allow-access-from domain="*" to-ports="80, 8080" /> </cross-domain-policy>

Thanks.

+3
source share
1 answer

You tried to debug it using WireShark, see if the application sends a request to port 843, and if the server sends a response through the socket? It was not entirely clear in your message, if you are already using the server application to work with the policy file, if not, you should either use the method, the link below should help.

If you need more information on how everything works, you can check this

+3
source

More articles:


All Articles