actionscript 3 - Incorrect crossdomain.xml file contents from api.soundcloud.com -
it seems there wrong soundcloud.com's crossdomain.xml file @ url: https://api.soundcloud.com/crossdomain.xml
if open xml link in new tab/window , refresh page few times notice inconsistency of shown xml content...
it serves this:
<cross-domain-policy> <!-- allow access anywhere. policy should used domains serving third party apps (api, images, streams). --> <allow-access-from domain="*" secure="false"/> <site-control permitted-cross-domain-policies="master-only"/> </cross-domain-policy>
but serves instead:
<cross-domain-policy> <!-- lock down access flash applications served us. policy should served domains flash apps require access , not serving api, images or stream (those need open third party apps well). --> <allow-access-from domain="soundcloud.com" secure="false"/> <allow-access-from domain="*.soundcloud.com" secure="false"/> <allow-access-from domain="*.sndcdn.com" secure="false"/> <site-control permitted-cross-domain-policies="master-only"/> </cross-domain-policy>
we need first response (allow-all) served our soundcloud integration work (embeded soundcloud tracks in calameo publications: http://www.calameo.com)
any ideas fix or work around this? thanks.
update (2015/10/12)
it seems soundcloud changed crossdomain.xml file incorrect version instead of correct one. url serves only:
<cross-domain-policy> <!-- lock down access flash applications served us. policy should served domains flash apps require access , not serving api, images or stream (those need open third party apps well). --> <allow-access-from domain="soundcloud.com" secure="false"/> <allow-access-from domain="*.soundcloud.com" secure="false"/> <allow-access-from domain="*.sndcdn.com" secure="false"/> <site-control permitted-cross-domain-policies="master-only"/> </cross-domain-policy>
Comments
Post a Comment