Crossdomain/Security Error...

[rt30000]

I am getting a security error when trying to use an RSS feed in my Flex application. The data provider (RSS) does have a crossdomain policy in place and everything seems to be setup correctly. My application works in debug (either by clicking debug in the builder or by loading the html file in the /bin-debug folder) but release builds throw the security error. I have made a post regarding this in the Adobe FLex forums but have so far only managed to find others with similar prolems.

Here is the current thread...http://www.adobe.com/cfusion/webforu...&enterthread=y

Thank you for any insight you can shed on this. View Source is enabled on the application.

[dr_zeus]

I think you're sending the crossdomain.xml with the wrong content type. When I try to access http://davidaxson.typepad.com/crossdomain.xml it doesn't load directly in the browser, but tries to download and run in my system default XML editor.

See this from your Adobe thread:

Error: [strict] Ignoring policy file at http://www.davidaxson.typepad.com/crossdomain.xml due to bad Content-Type 'application/atom+xml'. See http://www.adobe.com/go/strict_policy_files to fix this problem.

The policy file seems to be coming as application/atom+xml when it certainly isn't an Atom feed. You'll have to serve it as text/xml, I think.

[rt30000]

Thx Dr_Zuess, you're always quick to the rescue. I am working down that path now, trying to find out why it's being served as a different content-type. Unfortunately, it may mean i need to build a proxy file becuase they must have it set they way for a reason.