# Security sandbox violation inside one domain?

**URL:** <https://forum.kirupa.com/t/security-sandbox-violation-inside-one-domain/293005>\
**Category:** Uncategorized\
**Created:** [July 21, 2009, 11:41pm UTC](https://forum.kirupa.com/t/security-sandbox-violation-inside-one-domain/293005 "2009-07-21T23:41:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![magarik](https://avatars.discourse-cdn.com/v4/letter/m/df788c/32.png) [@magarik](https://forum.kirupa.com/u/magarik)\
**Post date:** [July 21, 2009, 11:41pm UTC](https://forum.kirupa.com/t/security-sandbox-violation-inside-one-domain/293005/1 "2009-07-21T23:41:51Z")

</div>

[SIZE=2]good night  
for some time i used a contact form in a flash website, and all worked well.  
then suddenly, when i tried to submit it i got the following error (i replaced my domain name with “domain”, for paranoiac reasons):

[/SIZE] [FONT=Verdana][SIZE=2]Warning: Failed to load policy file from [http://www.domain.com/crossdomain.xml[/SIZE][/FONT]](http://www.domain.com/crossdomain.xml%5B/SIZE%5D%5B/FONT%5D)  
[FONT=Verdana][SIZE=2] [/SIZE][/FONT]  
[FONT=Verdana][SIZE=2]\*\*\* Security Sandbox Violation \*\*\*[/SIZE][/FONT]  
[FONT=Verdana][SIZE=2]Connection to [http://www](http://www).[/SIZE][/FONT][FONT=Verdana][SIZE=2]domain[/SIZE][/FONT][FONT=Verdana][SIZE=2].com/contact\_parse.php halted - not permitted from http://[/SIZE][/FONT][FONT=Verdana][SIZE=2]domain[/SIZE][/FONT][FONT=Verdana][SIZE=2].com/pages/contact.swf[/SIZE][/FONT]  
[FONT=Verdana][SIZE=2] [/SIZE][/FONT]  
[SIZE=2][FONT=Verdana]Error #2044: Unhandled securityError:. text=Error #2048: Security sandbox violation: http://[/FONT][/SIZE][FONT=Verdana][SIZE=2]domain[/SIZE][/FONT][SIZE=2][FONT=Verdana].com/pages/contact.swf cannot load data from [http://www](http://www).[/FONT][/SIZE][FONT=Verdana][SIZE=2]domain[/SIZE][/FONT][SIZE=2][FONT=Verdana].com/contact\_parse.php.[/FONT][/SIZE]  
[FONT=Verdana][SIZE=2] [/SIZE][/FONT]  
[FONT=Verdana][SIZE=2]Error: Request for resource at [http://www](http://www).[/SIZE][/FONT][FONT=Verdana][SIZE=2]domain[/SIZE][/FONT][FONT=Verdana][SIZE=2].com/contact\_parse.php by requestor from http://[/SIZE][/FONT][FONT=Verdana][SIZE=2]domain[/SIZE][/FONT][FONT=Verdana][SIZE=2].com/pages/contact.swf is denied due to lack of policy file permissions.[/SIZE][/FONT]  
[SIZE=2][FONT=Verdana]I went and looked up this crossdomain.xml, and found out it is only used for… cross-domain communication.

why, especially so suddenly, is this policy required when communicating within the boundaries of one single domain?

if anybody knows i will be very grateful  
thanks,  
again good night,  
michael  
[/FONT][/SIZE]