How to add crossdomain.xml in sub directory


The <a href="http://www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html" rel="nofollow">spec for cross domain policy files</a> says that you can put a the crossdomain.xml file outside the root through the use of a X-Permitted-Cross-Domain-Policies header. How exactly does one go about doing that? I want to put a crossdomain.xml file in a sub directory (I don't have access to the root). This is from page 11 of <a href="http://www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html" rel="nofollow">the spec</a>:


When clients require a policy file, they look at the root by default. A domain should always host a master policy file to enforce its intended meta-policy. If a client is instructed to load a policy file other than the master policy file, the client must still check the master policy file to ensure that the meta-policy defined by the master policy file permits the use of the originally requested policy file.

Without a master policy file, it is left to the client to enforce the default behavior. Instead of relying entirely on master policy files for meta-policies, clients may also decide to check for a X-Permitted-Cross-Domain-Policies header in documents to specify a meta-policy. In addition to the values acceptable in permitted-cross-domain-policies, this header may also use a value of none-this-response to indicate that the current document should not be used as a policy file despite other headers or its content. Non-master policy files can only grant access to data within their own directory or subdirectories.



I'm guessing you want to use the crossdomain.xml for a Flash client? fact is, by default a flash client always tries to find that file in the root. as the specs state, everything else must be set in the client. I'm not a flash coder - you should tag this question with "flash" or whatever else the client is coded in.


  • Enforce an Edge to connect two distinct vertex classes
  • Is it good to have multiple database running in a same project?
  • When is locking on types a good idea?
  • Android NFC read Tags issue. Activity starts each time on data received
  • openssl handshake failed
  • How to resolve docker host names (/etc/hosts) in containers
  • force json_encode to create strings
  • Mixing WebForms and MVC: What should I do with the MasterPage?
  • Request response issues in biztalk
  • Why must we declare a variable name when adding a method to a struct in Golang?
  • Doctrine2 bulk import try to work with another entity
  • How to get links to open in the native browser in iOS Meteor apps?
  • C# program and C++ DLL compiled for 32-bit system crash on 64-bit system
  • rspec simple example getting error on request variable in integration test
  • Loading .coffee files via a view in Rails
  • Create DicomImage from scratch using Dcmtk
  • How to attach a node.js readable stream to a Sendgrid email?
  • Chrome doesn't support silverlight anymore? How to solve this?
  • How to avoid particles glitching together in an elastic particle collision simulator?
  • Exception “firebase.functions() takes … no argument …” when specifying a region for a Cloud Function
  • Ajax Loaded meta Tags
  • Recording logins for password protected directories
  • FB SDK and cURL: Unknown SSL protocol error in connection to graph.facebook.com:443
  • Splitting given String into two variables - php
  • Why HTML5 Canvas with a larger size stretch a drawn line?
  • Spray.io: When (not) to use non-blocking route handling?
  • Check if a string to interpolate provides expected placeholders
  • Modifying destination and filename of gulp-svg-sprite
  • htaccess rewriting URLs with multiple forward slashes
  • Display Images one by one with next and previous functionality
  • Web-crawler for facebook in python
  • Apache 2.4 - remove | delete | uninstall
  • GridView Sorting works once only
  • How do I rollback to a specific git commit
  • A cron job substitute?
  • Windows forms listbox.selecteditem displaying “System.Data.DataRowView” instead of actual value
  • Unit Testing MVC Web Application in Visual Studio and Problem with QTAgent
  • Benchmarking RAM performance - UWP and C#
  • need help with bizarre java.net.HttpURLConnection behavior
  • How to load view controller without button in storyboard?