User Guide

LocalConnection.allowDomain 403
LocalConnection.allowDomain
Availability
Flash Player 6; behavior changed in Flash Player 7.
Usage
receiving_lc.allowDomain = function([sendingDomain:String]) : Boolean {
// Your statements here return true or false
}
Parameters
sendingDomain
A string that represents an optional parameter specifying the domain of the
SWF file that contains the sending LocalConnection object.
Returns
Nothing.
Description
Event handler; invoked whenever receiving_lc receives a request to invoke a method from a
sending LocalConnection object. Flash expects the code you implement in this handler to return
a Boolean value of
true or false. If the handler doesn’t return true, the request from the
sending object is ignored, and the method is not invoked.
When this event handler is absent, Flash Player applies a default security policy, which is
equivalent to the following code:
my_lc.allowDomain = function (sendingDomain)
{
return (sendingDomain == this.domain());
}
Use LocalConnection.allowDomain to explicitly permit LocalConnection objects from
specified domains, or from any domain, to execute methods of the receiving LocalConnection
object. If you don’t declare the
sendingDomain parameter, you probably want to accept
commands from any domain, and the code in your handler would be simply
return true. If you
do declare
sendingDomain, you probably want to compare the value of sendingDomain with
domains from which you want to accept commands. The following examples show both
implementations.
In files authored for Flash Player 6, the
sendingDomain parameter contains the superdomain of
the caller. In files authored for Flash Player 7 or later, the
sendingDomain parameter contains the
exact domain of the caller. In the latter case, to allow access by SWF files hosted at either
www.domain.com or store.domain.com, you must explicitly allow access from both domains.
// For Flash Player 6
receiving_lc.allowDomain = function(sendingDomain) {
return(sendingDomain=="domain.com");
}
// For Flash Player 7 or later
receiving_lc.allowDomain = function(sendingDomain) {
return(sendingDomain=="www.domain.com" ||