In the past, I have been able to successfully test insecure Flash cross-domain policies by using tools such as the followings:

The policy is a normal "wildcard" one and looks like this:

<allow-access-from domain="*" secure="false"/>

However, in a current case I cannot make the usual proof of concept. Using the previous tools I get errors such as the followings:

ioErrorHandler: [IOErrorEvent type="ioError" bubbles=false cancelable=false eventPhase=2 text="Error #2032"]

openHandler: [Event type="open" bubbles=false cancelable=false eventPhase=2]

I tried looking around on the Internet to pinpoint the issue, but got nowhere. What am I missing?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.