Questions tagged [crossdomain.xml]

A cross-domain policy file is an XML document that grants a web client - such as Adobe Flash Player, Adobe Reader, etc. - permission to handle data across multiple domains.

Filter by
Sorted by
Tagged with
0
votes
1answer
67 views

Can I send/receive HTTP requests/responses with a subdomain on a crossdomain.xml file?

(I'll use website.com in place of the actual domain as to not disclose any specific website vulnerability) I noticed on a website that their crossdomain.xml file allowed access from another website ...
4
votes
1answer
625 views

CSRF Bypass using ActionScript via weak CrossDomain.xml

I have a target which has weak CrossDomain.xml but it prevents CSRF attack looking at one of the custom HTTP headers. I found following actionscript on a couple of websites, which works perfectly ...
2
votes
0answers
350 views

Flash Cross-Domain Proof of Concept

In the past, I have been able to successfully test insecure Flash cross-domain policies by using tools such as the followings: https://thehackerblog.com/crossdomain/ https://github.com/nccgroup/...
2
votes
0answers
376 views

cross-domain.xml file: Different policies in different directories

I came across cross-domain xml files on Vimeo and found that there are different policies on different directories. One on https://vimeo.com/settings/crossdomain.xml <?xml version="1.0" encoding="...
1
vote
1answer
925 views

Secure crossdomain for rtmp/flash streaming/wowza

I've been a bit lost. I have the following situation: Flash Player file is on https://sub.example.com/player.swf crossdomain.xml is on https://sub2.example.com/crossdomain.xml Streaming is done ...