About Domains, Cross-Domain Security, And Swf Files - MACROMEDIA FLASH 8-LEARNING ACTIONSCRIPT 2.0 IN FLASH Manual

Can interact with other local-with-file-system files, but includes restrictions to
the following:
Cross-scripting (such as ActionScript access to objects in other SWF files).
Calling
System.security.allowDomain
Using
LocalConnection
LocalConnection.allowDomain
Local-with-file-system SWF files can interact with other local-with-file-system,
non-network SWF files. However, they cannot interact with local-with-network
SWF files.
Local-with-file-system SWF files have read access to known files on the local file system.
For example, you can use
load from the local file system and not the Internet.
Local-with-file-system SWF files cannot communicate with HTML pages, which includes
the following:
Inbound scripting (such as ExternalInterface API, ActiveX, LiveConnect, and
XPConnect)
Outbound scripting (such as custom
getURL("javascript:...")
An exception to this is if the HTML page is trusted.
About domains, cross-domain security,
and SWF files
By default, Flash Player 7 and later versions prevent a SWF file served from one domain from
reading data, objects, or variables from SWF files that are served from different domains. In
addition, content that is loaded through nonsecure (non-HTTPS) protocols cannot read
content loaded through a secure (HTTPS) protocol, even when both are in exactly the same
domain. For example, a SWF file located at http://www.macromedia.com/main.swf cannot
load data from https://www.macromedia.com/data.txt without explicit permission; neither
can a SWF file served from one domain load data (using
another domain.
Identical numeric IP addresses are compatible. However, a domain name is not compatible
with an IP address, even if the domain name resolves to the same IP address.
694 Understanding Security
as sender or listener and regardless of
handlers.
in a local-with-file-system SWF file as long as you
XML.load()
fscommand
)
calls, and
, for example) from
loadVars()