Hello Raja,
You probably want to take a look at this article:
http://www.adobe.com/cfusion/communityengine/index.cfm?event=showdetails&postId=10284&productId=2
It has samples of what the crossdomain.xml file should look like.
If you open up your crossdomain file to more than just the domains that need
it, you are allowing other swfs (Flash and Flex) to access the data on that
server. For some this may be what they want, it sounds like you want a more
restricted setup, and this will allow for that. It won't lock it down
completely, since only swfs are adhering to that security policy.
David Moore
Flash and Flex Developer - http://vandermore.com
On Tue, Apr 14, 2009 at 8:23 AM, raja_s_patil wrote:
>
>
> thanks Tracy Spratt
>
> >
> > Flex does not access any database directly (except maybe SQLServer, via
> > native http endpoints) You must use a server platform for database
> > integration. .Net, php, ColdFusion, java, etc are popular server tier
> > platforms.
> >
> yes I am aware of that. We plan to use BlazeDS and Spring on database
> server. As of today we have not plunged in details of them since
> we are phase of evaluating Flex for a bit big database application.
>
> >
> > Flex communicates primarily via the RPC protocols, HTTPService,
> WebService,
> > and RemoteObject. It does not care where the data resources are
> physically
> > located. You will need a crossdomain file on the data server.
> >
>
> Well, Can u mention how a crossdomain file looks like
> just for an idea. We are happy to hear that cross domain data
> access is possible since in the rough layout of application
> it needs to post data on two different databases as cross branch
> transactions.
>
> Are there any security threats in using cross domain data access ?
>
> Thanks Once Again and best regards
>
> Raja
>
>
>
