# Flash RSS Reader vs. crossdomain.xml

**URL:** <https://forum.kirupa.com/t/flash-rss-reader-vs-crossdomain-xml/312704>\
**Category:** flash\
**Created:** [August 10, 2010, 11:20pm UTC](https://forum.kirupa.com/t/flash-rss-reader-vs-crossdomain-xml/312704 "2010-08-10T23:20:55Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ibsen](https://avatars.discourse-cdn.com/v4/letter/i/c67d28/32.png) [@ibsen](https://forum.kirupa.com/u/ibsen)\
**Post date:** [August 10, 2010, 11:20pm UTC](https://forum.kirupa.com/t/flash-rss-reader-vs-crossdomain-xml/312704/1 "2010-08-10T23:20:55Z")

</div>

I’m building a Flash based RSS reader, to be run on a kisok, but it’s getting tripped up by crossdomain issues.

In the abstract: SWF loads local TXT file containing paths of remote RSS feeds (XML files), then loads the feeds stored at those remote paths.

Something like this pseudocode:

```auto
// feed_reader.swf loads local TXT file containing paths:

txtobj.load('settings.txt');

// on successfully loading TXT file, feed_reader.swf gets the remote path stored there,
// (e.g. txtobj.xmlpath would contain 'http://sports.espn.go.com/espn/rss/oly/news')
// and loads the feed stored there:

xmlobj.load(txtobj['xmlpath']);

```

In standalone Flash Players, this works. In browsers, it fails to load the feed. I checked the crossdomain policy file that showed up in Safari’s Activity Monitor, and it contains this:

```auto
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
   <allow-access-from domain="*" />
</cross-domain-policy>

```

I was under the impression that an single asterisk/wildcard in quotes would mean any domain could access content on that server. But it’s not working that way.

I’ve tried changing the Publish Settings to _“Access Local Files Only,”_ and _“Access Network Only,”_ to no avail. I’ve also tried adding all of the relevant files to the trust list in Macromedia’s Global Security Settings page.