# Security.allowDomain doesn't work?

**URL:** <https://forum.kirupa.com/t/security-allowdomain-doesnt-work/266986>\
**Category:** flash\
**Created:** [July 26, 2008, 8:58pm UTC](https://forum.kirupa.com/t/security-allowdomain-doesnt-work/266986 "2008-07-26T20:58:40Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![tibberous](https://avatars.discourse-cdn.com/v4/letter/t/cdc98d/32.png) [@tibberous](https://forum.kirupa.com/u/tibberous)\
**Post date:** [July 26, 2008, 8:58pm UTC](https://forum.kirupa.com/t/security-allowdomain-doesnt-work/266986/1 "2008-07-26T20:58:40Z")

</div>

I have the line:

Security.allowDomain("\*.expressionstributes.com");

But when I got to my movie, I get: Security sandbox violation: LoaderInfo.content: [http://cp.expressionstributes.com/control/PreviewTheme.swf](http://cp.expressionstributes.com/control/PreviewTheme.swf) cannot access [http://images.expressionstributes.com/logos/4.swf](http://images.expressionstributes.com/logos/4.swf). This may be worked around by calling Security.allowDomain

Am I missing something? Does it not work with wildcards?

I like AS3, but I really think they screwed up up the security model… and URLRequests…