Flash 10中的跨域.xml文件存在问题

Flash 10中的跨域.xml文件存在问题,flash,actionscript-3,security,crossdomain.xml,Flash,Actionscript 3,Security,Crossdomain.xml,我觉得我的头好像撞到了墙上。我尝试过(我认为)跨域xml文件的每一种变体,但都没有成功。不管我怎么做,我似乎都无法让我的跨域加载器()请求正常工作。以下是my policyfiles.txt日志文件的输出 OK: Root-level SWF loaded: http://cool.com:81/WEBPLAYERAS3.swf OK: Searching for <allow-access-from> in policy files to authorize data loadin

我觉得我的头好像撞到了墙上。我尝试过(我认为)跨域xml文件的每一种变体,但都没有成功。不管我怎么做,我似乎都无法让我的跨域加载器()请求正常工作。以下是my policyfiles.txt日志文件的输出

OK: Root-level SWF loaded: http://cool.com:81/WEBPLAYERAS3.swf
OK: Searching for <allow-access-from> in policy files to authorize data loading from resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf
OK: Searching for <allow-access-from> in policy files to authorize data loading from resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/a61d36278cc44cd1a0b8fa10f3edc914.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf
OK: Searching for <allow-access-from> in policy files to authorize data loading from resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/ba8d7a1701954a6cb03e7aaf12a26a2b.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf
OK: Searching for <allow-access-from> in policy files to authorize data loading from resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/91f6f184518247f0916692286dd7101a.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf
OK: Policy file accepted: https://replayservice2.secretdomain.com/crossdomain.xml
Error: Request for resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf is denied due to lack of policy file permissions.
Error: Request for resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/a61d36278cc44cd1a0b8fa10f3edc914.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf is denied due to lack of policy file permissions.
Error: Request for resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/ba8d7a1701954a6cb03e7aaf12a26a2b.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf is denied due to lack of policy file permissions.
Error: Request for resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/91f6f184518247f0916692286dd7101a.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf is denied due to lack of policy file permissions.
OK: Searching for <allow-access-from> in policy files to authorize data loading from resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf
Error: Request for resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf is denied due to lack of policy file permissions.
OK: Searching for <allow-access-from> in policy files to authorize data loading from resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf
Error: Request for resource at https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg by requestor from http://cool.com:81/WEBPLAYERAS3.swf is denied due to lack of policy file permissions.
OK:根级别SWF加载:http://cool.com:81/WEBPLAYERAS3.swf
确定:在策略文件中搜索以授权从位于的资源加载数据https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf
确定:在策略文件中搜索以授权从位于的资源加载数据https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/a61d36278cc44cd1a0b8fa10f3edc914.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf
确定:在策略文件中搜索以授权从位于的资源加载数据https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/ba8d7a1701954a6cb03e7aaf12a26a2b.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf
确定:在策略文件中搜索以授权从位于的资源加载数据https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/91f6f184518247f0916692286dd7101a.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf
确定:已接受策略文件:https://replayservice2.secretdomain.com/crossdomain.xml
错误:请求位于的资源https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf 由于缺少策略文件权限而被拒绝。
错误:请求位于的资源https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/a61d36278cc44cd1a0b8fa10f3edc914.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf 由于缺少策略文件权限而被拒绝。
错误:请求位于的资源https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/ba8d7a1701954a6cb03e7aaf12a26a2b.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf 由于缺少策略文件权限而被拒绝。
错误:请求位于的资源https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/91f6f184518247f0916692286dd7101a.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf 由于缺少策略文件权限而被拒绝。
确定:在策略文件中搜索以授权从位于的资源加载数据https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf
错误:请求位于的资源https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf 由于缺少策略文件权限而被拒绝。
确定:在策略文件中搜索以授权从位于的资源加载数据https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf
错误:请求位于的资源https://replayservice2.secretdomain.com/api/servlet/screenshot/0.8/1.0/9175218823c9438aa322cdb767561dbd.jpg 由请求者从http://cool.com:81/WEBPLAYERAS3.swf 由于缺少策略文件权限而被拒绝。
这是我的crossdomain.xml文件:

<cross-domain-policy xsi:noNamespaceSchemaLocation="http://www.adobe.com/xml/schemas/PolicyFile.xsd">
<allow-access-from domain="*" secure="true"/>
<site-control permitted-cross-domain-policies="master-only"/>
</cross-domain-policy>

请注意,实际域已替换为secretdomain.com

我所做的就是在AS3中检索图像并将它们分配给位图

更新


只有在从不安全的服务器调用安全服务器时,问题才会出现。这是被禁止的,还是有办法解决这个问题?

我是一个ActionScript noobie,但它能做到吗?

如果有帮助的话,我已经加入了我们的跨域策略。我们唯一不同的地方就是站点控制标签

<cross-domain-policy xsi:noNamespaceSchemaLocation="http://www.adobe.com/xml/schemas/PolicyFile.xsd">
   <site-control permitted-cross-domain-policies="all"/> 
   <allow-http-request-headers-from domain="*"/> 
   <allow-access-from domain="*" secure="false" to-ports="*"/>
</cross-domain-policy>

我在你贴的东西里看到了

OK: Root-level SWF loaded: http://cool.com:81/WEBPLAYERAS3.swf
这说明您的swf正在端口81上加载
您在哪个端口上发送跨域数据?
这一点非常重要,在您使用的每个端口上都有一个标记。

如果您尝试从http端口通信到https端口,您将得到“swf由于缺少策略文件权限而被拒绝”以避免此类错误,您可以在crossdomain.xml中包含以下标记

< allow-access-from domain="*" secure="false" to-ports="*" > < site-control permitted-cross-domain-policies="all" > 这解决了“安全沙盒冲突”

如果收到警告消息“未指定元策略。应用默认元策略‘仅限主策略’”,请在crossdomain.xml中放置以下标记

< allow-access-from domain="*" secure="false" to-ports="*" > < site-control permitted-cross-domain-policies="all" >
您的更新您的整个问题都有答案:
“只有在从不安全的服务器调用我们的安全服务器时才会出现此问题。这是被禁止的,还是有办法解决此问题?”

特别是当我们查看您的政策文件的重要部分时:

<allow-access-from domain="*" secure="true"/>


“secure=True”部分意味着您特别不允许调用mix-n-match安全连接和非安全连接,它们都必须是安全的。在那里有“真实”的价值,你就是那个禁止它的人。当然,解决方法是将其设置为“secure=False”,就像在这里发布的其他几个策略文件中一样。

除了在“允许从”标记中设置secure=“False”,还可以在“允许从”标记中设置secure=“False”。您的crossdomain.xml应该如下所示-

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="*" secure="false"/>
<allow-http-request-headers-from domain="*" headers="SOAPAction"  secure="false"/>
</cross-domain-policy>


我还应该提到我的crossdomain.xml文件位于:调用的swf位于端口81,但是我们呼叫的服务器在端口80上。然后,您需要在端口80上的服务器根目录上创建一个跨域文件。哦,等一下,您的swf在http端口81上,您正在尝试调用https端口80?抱歉,我猜https是defa提供的443