# Security.allowDomain and crossdomain.xml

**URL:** <https://forum.kirupa.com/t/security-allowdomain-and-crossdomain-xml/312612>\
**Category:** flash\
**Created:** [August 9, 2010, 6:54am UTC](https://forum.kirupa.com/t/security-allowdomain-and-crossdomain-xml/312612 "2010-08-09T06:54:56Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Cabarapak](https://avatars.discourse-cdn.com/v4/letter/c/df788c/32.png) [@Cabarapak](https://forum.kirupa.com/u/Cabarapak)\
**Post date:** [August 9, 2010, 6:54am UTC](https://forum.kirupa.com/t/security-allowdomain-and-crossdomain-xml/312612/1 "2010-08-09T06:54:56Z")

</div>

I have a Flash application that loads images. It loads them from an external source. These external images are .swf files. The application is located at root ([www.mydomain.com) while the .swf images are located in a subdirectory ([URL=“http://www.mydomain.com/images/”]www.mydomain.com/images/](http://www.mydomain.com)).

I get a security sandbox violation when my application attempts to load the external images. It says in the error message that I can get around this by using Security.allowDomain. I tried this but it didn’t work. I put the line “Security.allowDomain(‘[www.mydomain.com](http://www.mydomain.com)’)” in each external image .swf file. It still wouldn’t load the external images.

What can I do to allow my application to load external .swf files that are located in a subdirectory? Do I need to work with crossdomain.xml or is this irrelevant?

Any help would be appreciated.