crossdomain.xml

crossdomain.xml 的路徑

<?xml version="1.0" encoding="utf-8"?>
<cross-domain-policy>
  <allow-access-from domain="*.wretch.cc" />
  <allow-access-from domain="tw.rd.yahoo.com" />
  <allow-access-from domain="*.corp.yahoo.com" />
  <allow-access-from domain="l.yimg.com" />
</cross-domain-policy>

今天譬如一段embed code嵌在 chunghe.blogspot.com 裡面

<embed id="diguRssReader" width="200" height="278" align="middle" type="application/x-shockwave-flash" pluginspage="http://www.adobe.com/go/getflashplayer" allowscriptaccess="sameDomain" flashvars="name=bigvan&Interval=10000" name="diguRssReader" wmode="transparent" bgcolor="#869ca7" quality="high" src="http://l.yimg.com/wretch.yimg.com/photos/serv/digu/diguRssReader.swf"/>

crossdomain.xml裡面的allow domain是check swf l.yimg.com 這個 domain 而不是check chunghe.blogspot.com這個domain