Comment Added by : Mark McWhirter

Comment Added at : 2012-10-09 05:58:14

Comment on Tutorial : Error: File does not exist: crossdomain.xml in your server error logs By Emiley J
The xml listed above will allow ANY domain to execute code, something that I would not want on my site. For me a better strategy is by default to disallow all domains, and adding on a case-by-case basis:

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="none"/>
</cross-domain-policy>

View Tutorial