User Guide

844 Chapter 2: ActionScript Language Reference
System.security.allowDomain()
Availability
Flash Player 6; behavior changed in Flash Player 7.
Usage
System.security.allowDomain("domain1":String, "domain2", ... "domainN") : Void
Parameters
domain1, domain2, ... domainN
Strings that specify domains that can access objects and
variables in the file containing the
System.Security.allowDomain() call. The domains can be
formatted in the following ways:
• "domain.com"
• "http://domain.com"
• "http://IPaddress"
Description
Method; lets SWF files and HTML files in the identified domains access objects and variables in
the calling SWF file or in any other SWF file from the same domain as the calling SWF file.
In files playing in Flash Player 7 or later, the parameter(s) passed must follow exact-domain
naming rules. For example, to allow access by SWF files hosted at either www.domain.com or
store.domain.com, both domain names must be passed:
// For Flash Player 6
System.security.allowDomain("domain.com");
// Corresponding commands to allow access by SWF files
// that are running in Flash Player 7 or later
System.security.allowDomain("www.domain.com", "store.domain.com");
Also, for files running in Flash Player 7 or later, you can’t use this method to let SWF files hosted
using a secure protocol (HTTPS) allow access from SWF files hosted in nonsecure protocols; you
must use System.security.allowInsecureDomain() instead.
Occasionally, you might encounter the following situation: You load a child SWF file from a
different domain and want to allow the child SWF file to script the parent SWF file, but you
don’t know the final domain from which the child SWF file will come. This can happen, for
example, when you use load-balancing redirects or third-party servers.
In this situation, you can use the MovieClip._url property as an argument to this method. For
example, if you load a SWF file into
my_mc, you can call
System.security.allowDomain(my_mc._url).
If you do this, be sure to wait until the SWF file in
my_mc is loaded, because the _url property
does not have its final, correct value until the file is completely loaded. The best way to determine
when a child SWF finishes loading is to use MovieClipLoader.onLoadComplete.