SUBSCRIBE
Uncaught Exception: Permission denied to call method to Location.toString
You may have noticed recently that some Flash applications (maybe yours) are not connecting to retrieve remote content anymore. If you're running FireFox, you are getting this cryptic message in the error console: "Uncaught exception: Permission denied to call method to Location.toString". Only some users are getting this error and others aren't.What's going on here? As it turns out, there was a Flash security update between version Flash 9.0.115.0 and 9.0.124.0 that changed the behavior of the crossdomain security policy file. A number of changes have been made that potentially break things but one of note here is that arbitrary headers can not be sent anymore from a remote domain unless you specify a security policy to do so. How do I do this? Thankfully, it's an easy one line fix in your crossdomain.xml file.
Before:
<cross-domain-policy> <site-control permitted-cross-domain-policies="all"/> <allow-access-from domain="*" /> </cross-domain-policy>After:
<cross-domain-policy> <site-control permitted-cross-domain-policies="all"/> <allow-access-from domain="*" /> <allow-http-request-headers-from domain="*" headers="*"/> </cross-domain-policy>For more information on the new allow-http-request-headers-from tag go to Adobe's TechNote page on arbitrary headers not being sent
didn't seem to fix the problem. Below is the code that I used. Any idea why this didn't work?
<b>
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-access-from domain="*" />
<allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy>
</b>
If it is your Flash app you are developing, you will need to also in the Actionscript code specify the crossdomain file like so:
Security.loadPolicyFile("http://(your url)/crossdomain.xml");
If you still have questions, send me an email.
M.Reeder at st-paulshigh.manchester.sch.uk
The allow-access-from domain="*" wildcard is used to give access to all possible domains hosting swf files trying to access the server with the crossdomain file on it. You can specify particular domain names there instead if you only want those domains to access your stuff. This is great when you have a sitelocked game for example.<br>
The error only occurs for people with the latest Flash installed because Adobe unrolled this security 'feature' with that release. The Internet Explorer Flash plugin seems to not have this feature <i>yet</i>.
You can only see this error in Firefox if you have Firebug installed.
I do have Firebug installed and this error does not occur for me. The only reason that I know this error occurs for some of our Firefox users is that we have an window.onerror function defined that sends me an email when this error occurs for our website visitors. When I access our website with Firefox, I do not get this error in Firebug nor do I get this error emailed to me.
Having a crossdomain.xml file won't help me... I'm wondering what I should do. I don't want to update my SWF to a higher version.
(Will? you are the webmaster? you should put timestamp in posted comments)
You are getting this error with a Flash 6 swf? Is the version of Flash installed on your computer Flash 9 and the swf you are checking is compiled for Flash 6 or do you have just Flash 6 installed on your computer as well?
You can check by trying to load any Flash 9 games like <a href="http://willperone.net/Projects/Game2/game2.php">Beat Me Up</a>. If you don't have Flash 9 installed then I'm not sure what the error could be aside from that in your case it might actually be a javascript error.
I'm not totally sure the error comes from Flash 9 because I just installed Flash 8r42 and I have the same problem.
I'm going to dig a little more in this problem to find a solution.
http://www.inbluelight.com/cnet/test/iframe_js_error/iframe.html
I've added a crossdomain.xml file with the exact same contents that you've posted to the root of my site. And there is no difference at all when the Flash ad loads on it - FF3 with Firebug still displays the error. Am I misunderstanding which site needs to have the xml file in it? The site which has it currently is the site that loads and displays the Flash ad, not the server that houses the ad. Any additional thoughts for why this solution isn't working?
I've tried this solution on an asp.net 3.5 site and it DID work. However, the first site I tried it on is using MVC and it didn't work for that.
unfortunately i don't think that did it. does anyone have any links to adobe or firefox addressing this as an issue? i wish there was a concrete document stating that there is a problem with the latest flash player or with firefox.
msxml3.dll error '80072ee2'
The operation timed out
?, line 0
http://bugs.adobe.com/jira/browse/FP-561
http://www.adobe.com/go/kb403030
It may or may not pertain to this problem, but if it does, it means that there are some SWFs that cannot be accommodated with the policy files.
I placed the crossdomain.xml file into my root path of the webserver but its not resolving the error. I am loading a flash file from another domain and I don't have access to the flash/action script itself.
Is there someway to reference the crossdomain.xml file in the html/javascript that calls the flash file from the other domain? If not, what do I need to provide the flash developers to add to their flash files so this error will go away.
http://bugs.adobe.com/jira/browse/FP-561
Assorted errors otherwise still persist on the Firefox errors window (java) parsing, no element found,zoom, assorted scrollbar errors etc.
Funny thing is I can still go anywhere on the net either using Firefox or IE, using my bookmarks, going from search result pages, or directly typing a webpage address and there is no problem, EXCEPT when I want to go to ONE specific page. Yes I checked to make sure it was not blocked by the firewall,and virus protection programs, or the browser settings, and added it into any setting that WOULD ALLOW it. I've been chasing my tail with this for quite a while, almost a month now. I even checked with my ISP Provider - no problem there, and I checked with others who use this same page - which requires a login - no problem there either. I am considering rolling back the flash player to see if that will help as I must have access to this page for my in home business. If you wish to try the link here it is - see if it will load for you. http://www.watkinsonline.com
After waiting quite a while, I end up with a blank page, it says it's done, and the page title is there, but no content - I was wondering if it is an about blank hyjack??
I have Java 6 Standard Edition update 14 (buile 1.6.0_14-b08) from Sun Microsystems, Inc. and I have Adobe Flash 10 but not the shockwave as it turns out ( I just ran the adobe page that checks these programs - which that does jog my memmory, I remember trying to upgrade that before - several times, and it said it couldn't do it or find something close to replace it or something like that. http://www.adobe.com/shockwave/welcome/ that is the page to test these 2 programs. Anyway I will install the shockwave - since I am missing it and see if that helps ...
I have created the XML like this. but this Error did not clear.
<?xml version="1.0" encoding="iso-8859-1"?>
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-access-from domain="*" />
</cross-domain-policy>
<surveyFeedback><feedbackId>133</feedbackId>
<bgColor>0xDAEBF5</bgColor>
<subTitle><![CDATA[ ]]></subTitle>
</surveyFeedback>
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-access-from domain="*" />
<allow-http-request-headers-from domain="*" headers="*"/>
</cross-domain-policy>
Please post here if you have any script for this.
I need to get the PARENT ID from the child window in the cross domain. this is my code. which is working fine in same domain not in cross domain. Please can you post the script.
parent.document.getElementById('transpdiv').style.display='none';
Thanks for your reply i need to get the ParentID in cross domain for CLOSE the back end window. this code(parent.document.getElementById('transpdiv').style.display='none';) is working fine in same domain. but when i go to use this code(FEEDBACK TAB) in another domain i am getting this Javascript Error(Permission denied to get property Window.document) Please can you tell me your suggestion.
<pre>
self.close();
</pre>
What I've done in the past to close a window is redirect to another page that immediately closes itself onload:
<pre>
<body onload="self.close();"></body>
</pre>