Using crossdomain.xml

This page describes an older version, please read about the latest version at:

Version 2.5

About using crossdomain.xml

To access data from a different server other than the one hosting your Flex application, the remote server needs to have a cross-domain file in the root directory. For security reasons, the web browser cannot access data that resides outside the exact domain where the Shockwave Flash (SWF) file originated. However, Adobe Flash Player can load data across domains if permission is granted from the server. This is accomplished by including a small crossdomain.xml file on the remote server that permits Flash to connect to services on that server. See the following code example:

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "">
    <site-control permitted-cross-domain-policies="all"/>
    <allow-access-from domain="*"/>

Deploying crossdomain.xml

To deploy the cross-domain file on ArcGIS Server, see the instructions specific for your platform and version.

For additional information, read Cross-domain policy file specification, see the Adobe TechNote Cross-domain policy for Flash movies, or view a sample cross-domain file.