Comments on: Grails (Jetty) and crossdomain.xml http://colinharrington.net/blog/2008/07/grails-jetty-and-crossdomainxml/ Technologist, Consultant, Software Engineer, Entrepreneur and Musician Wed, 10 Mar 2010 10:19:08 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Colin http://colinharrington.net/blog/2008/07/grails-jetty-and-crossdomainxml/comment-page-1/#comment-3748 Colin Wed, 22 Jul 2009 03:45:48 +0000 http://colinharrington.net/blog/index.php/2008/07/13/grails-jetty-and-crossdomainxml/#comment-3748 Just FYI, Grails has come a long way since I wrote this post. now you would just set grails.app.context = "/" In grails-app/conf/Config.groovy for the right environments Just FYI, Grails has come a long way since I wrote this post. now you would just set
grails.app.context = “/”
In grails-app/conf/Config.groovy for the right environments

]]> By: Heather http://colinharrington.net/blog/2008/07/grails-jetty-and-crossdomainxml/comment-page-1/#comment-2824 Heather Mon, 12 Jan 2009 19:10:12 +0000 http://colinharrington.net/blog/index.php/2008/07/13/grails-jetty-and-crossdomainxml/#comment-2824 This is almost exactly what I have been looking for! However, the Jetty server I am working with is configured via xml. Would you know the proper syntax to do what you did here in a jetty.xml file? This is almost exactly what I have been looking for! However, the Jetty server I am working with is configured via xml. Would you know the proper syntax to do what you did here in a jetty.xml file?

]]> By: James Ward http://colinharrington.net/blog/2008/07/grails-jetty-and-crossdomainxml/comment-page-1/#comment-1488 James Ward Sat, 30 Aug 2008 02:48:36 +0000 http://colinharrington.net/blog/index.php/2008/07/13/grails-jetty-and-crossdomainxml/#comment-1488 One of the great things about Flash is that it allows you to get around the same domain security policy in the browser. But this feature can open some significant security holes. Two general rules of thumb when using crossdomain.xml files: 1) Never use a * policy on a website that uses cookies 2) Never use a * policy on an internal / intranet website If you control the client that is running a Flash application making a crossdomain request then a better alternative to the crossdomain.xml file is to add the application to the Flash Player Trust list: http://livedocs.adobe.com/flex/3/html/help.html?content=security2_25.html I hope that helps. -James One of the great things about Flash is that it allows you to get around the same domain security policy in the browser. But this feature can open some significant security holes. Two general rules of thumb when using crossdomain.xml files:
1) Never use a * policy on a website that uses cookies
2) Never use a * policy on an internal / intranet website

If you control the client that is running a Flash application making a crossdomain request then a better alternative to the crossdomain.xml file is to add the application to the Flash Player Trust list:
http://livedocs.adobe.com/flex/3/html/help.html?content=security2_25.html

I hope that helps.

-James

]]> By: Groovy on Grails : Grails (Jetty) and crossdomain.xml( Colin Harrington) http://colinharrington.net/blog/2008/07/grails-jetty-and-crossdomainxml/comment-page-1/#comment-205 Groovy on Grails : Grails (Jetty) and crossdomain.xml( Colin Harrington) Mon, 14 Jul 2008 17:03:17 +0000 http://colinharrington.net/blog/index.php/2008/07/13/grails-jetty-and-crossdomainxml/#comment-205 [...] Original Source [...] [...] Original Source [...]

]]>