# Instagram crossdomain issues

**URL:** <https://forum.kirupa.com/t/instagram-crossdomain-issues/322867>\
**Category:** flash\
**Created:** [June 6, 2011, 11:17pm UTC](https://forum.kirupa.com/t/instagram-crossdomain-issues/322867 "2011-06-06T23:17:15Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![asciiman](https://avatars.discourse-cdn.com/v4/letter/a/5e9695/32.png) [@asciiman](https://forum.kirupa.com/u/asciiman)\
**Post date:** [June 6, 2011, 11:17pm UTC](https://forum.kirupa.com/t/instagram-crossdomain-issues/322867/1 "2011-06-06T23:17:15Z")

</div>

Hey all,

I’m trying to call an instagram api endpoint and having some issues.

Firstly, I’m calling

```auto
Security.loadPolicyFile("https://api.instagram.com/crossdomain.xml");

```

before I do anything.

When I try using a plain old loader, I get a Error #2048: Security sandbox violation: [http://local.blurb.com/obt/Avatar.swf](http://local.blurb.com/obt/Avatar.swf) cannot load data from [https://api.instagram.com/v1/users/self/?access\_token=blah](https://api.instagram.com/v1/users/self/?access_token=blah).

```auto
            var url:String = "https://api.instagram.com/v1/users/self/?access_token=" + profileData.authToken;
            
            var checkTokenRequest:URLRequest = new URLRequest(url);
            checkTokenRequest.method = URLRequestMethod.GET;
            
            var urlLoader:URLLoader = new URLLoader();
            urlLoader.addEventListener(Event.COMPLETE, onValidateTokenComplete); 
            urlLoader.addEventListener(IOErrorEvent.IO_ERROR, onError);
            urlLoader.addEventListener(SecurityErrorEvent.SECURITY_ERROR, onError);
            urlLoader.load(checkTokenRequest);

```

This is strange, because the policy file located at [https://api.instagram.com/crossdomain.xml](https://api.instagram.com/crossdomain.xml) seems to be just fine.

So, I tried with a Loader where I specified a LoaderContext and changed checkPolicyFile=true. Inspecting the network stack I see that flash actually loads the file, but this time I get a Error #2124: Loaded file is an unknown type. URL: [https://api.instagram.com/v1/users/self/?access\_token=blah](https://api.instagram.com/v1/users/self/?access_token=blah)

Is there any way I can get to this data? Something wrong with Instagram’s policy file?