Cross-domain policy

The Shockwave Player uses the cross- domain policy file to allow or deny requests from Shockwave movies to load files from external servers. When the request is made to the server, the Shockwave Player does not invoke the Security dialog box. The request succeeds if the cross-domain policy file in the Server allows access to the domain.

For more information, see loadPolicyFile() in the Scripting Dictionary.

In Adobe Director, cross-domain checking happens based on policy files, placed on the servers. This means that even the URLs accessed by the SWFs were being checked by the Shockwave player against the policy file. However, Adobe Flash player does cross-domain checking through policy files or through other security mechanisms (security.allowDomain). The checks which were done through the latter mechanism inside Flash player are not supported in Shockwave and because of this, the content which were accessed by this mechanism will fail to load in Shockwave player.