neurofuzzy, flash game development, rich internet applications, free source code - *alt.neurotica.fuzzy*

With the upcoming new Flash Player 10, stricter crossdomain rules are breaking Amazon S3 for those of us who wish to load content using the Flash Player. It seems that Amazon will need to do some work to make sure that the new Flash Player will work with Amazon S3, specifically they will need to define new meta-policy files to allow us to continue to use policy files within our buckets.

“With Phase 2 in Flash Player 10 beta, the meta-policy default will change from “all” to “master-only.” This will allow all master policy files (any policy file saved in the root of the domain with the name crossdomain.xml, such as http://example.com/crossdomain.xml) to continue to function as expected. However, all other policy files defined in alternate locations will require an explicit meta-policy for them to work.”

Currently, the Flash Player 10 interaction with S3 is broken, and they are at the Release Candidate stage.

See this information on Understanding the security changes in Flash Player 10 beta

And, this specifically with regards to Policy file changes in Flash Player 9.

We’ve been asking for a crossdomain policy file at the root of Amazon for some time now. At the very least to prevent those annoying http errors when the Flash Player tries to load it and fails. I believe this is as simple as placing a crossdomain policy file like this at:

http://s3.amazonaws.com/crossdomain.xml

<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
</cross>


If you clicked on that crossdomain link above and you get an error, it means that the problem still exists.

“If you depend on content from a domain outside of your control, you should contact that domain’s administrator and make sure they have a meta-policy that is up to date.”

I’ve contacted Amazon through their developer forum. Sometimes though, it takes more than one person to get the attention of the bigger guys. If you get a chance, drop them a line and tell them to get on the ball. Perhaps Adobe can help us out by doing a little outreach. This needs to be fixed soon!