User Guide

714 ActionScript classes
Use LocalConnection.allowDomain to explicitly permit LocalConnection objects from
specified domains, or from any domain, to execute methods of the receiving LocalConnection
object. If you don't declare the sendingDomain parameter, you probably want to accept
commands from any domain, and the code in your handler would be simply return true. If
you do declare sendingDomain, you probably want to compare the value of sendingDomain
with domains from which you want to accept commands. The following examples show both
implementations.
In files authored for Flash Player 6, the
sendingDomain parameter contains the superdomain
of the caller. In files authored for Flash Player 7 or later, the
sendingDomain parameter
contains the exact domain of the caller. In the latter case, to allow access by SWF files hosted
at either www.domain.com or store.domain.com, you must explicitly allow access from both
domains.
// For Flash Player 6
receiving_lc.allowDomain = function(sendingDomain) {
return(sendingDomain=="domain.com");
}
// For Flash Player 7 or later
receiving_lc.allowDomain = function(sendingDomain) {
return(sendingDomain=="www.domain.com" ||
sendingDomain=="store.domain.com");
}
Also, for files authored for Flash Player 7 or later, you can't use this method to let SWF files
hosted using a secure protocol (HTTPS) allow access from SWF files hosted in nonsecure
protocols; you must use the
LocalConnection.allowInsecureDomain event handler
instead.
Occasionally, you might encounter the following situation. Suppose you load a child SWF file
from a different domain. You want to implement this method so that the child SWF file can
make LocalConnection calls to the parent SWF file, but you don't know the final domain
from which the child SWF file will come. This can happen, for example, when you use load-
balancing redirects or third-party servers.
In this situation, you can use the
MovieClip._url property in your implementation of this
method. For example, if you load a SWF file into my_mc, you can then implement this
method by checking whether the domain argument matches the domain of
my_mc._url.
(You must parse the domain out of the full URL contained in
my_mc._url.)
If you do this, make sure that you wait until the SWF file in
my_mc is loaded, because the _url
property will not have its final, correct value until the file is completely loaded. The best way
to determine when a child SWF file finishes loading is to use
MovieClipLoader.onLoadComplete.