MACROMEDIA FLEX-FLEX ACTIONSCRIPT LANGUAGE Reference page 442

Returns
Nothing.
Description
Method; lets SWF files and HTML files in the identified domains access objects and variables in
the calling SWF file, which is hosted using the HTTPS protocol. It also lets the SWF files in the
identified domains access any other SWF files in the same domain as the calling SWF file.
By default, SWF files hosted using the HTTPS protocol can be accessed only by other SWF files
hosted using the HTTPS protocol. This implementation maintains the integrity provided by the
HTTPS protocol.
Macromedia does not recommend using this method to override the default behavior because it
compromises HTTPS security. However, you might need to do so, for example, if you must
permit access to HTTPS files published for Flash Player 7 or later from HTTP files published for
Flash Player 6.
A SWF file published for Flash Player 6 can use
HTTP to HTTPS access. However, because security is implemented differently in Flash Player 7,
you must use
System.Security.allowInsecureDomain()
published for Flash Player 7 or later.
Note: It is sometimes necessary to call
that exactly matches the domain of the SWF file in which this call appears. This is different from
System.security.allowDomain()
argument. The reason this is sometimes necessary with
that, by default, a SWF file at http://foo.com is not allowed to script a SWF file at https://foo.com,
even though the domains are identical.
Example
In the following example, you host a math test on a secure domain so that only registered students
can access it. You have also developed a number of SWF files that illustrate certain concepts,
which you host on an insecure domain. You want students to access the test from the SWF file
that contains information about a concept.
// This SWF file is at https://myEducationSite.somewhere.com/mathTest.swf
// Concept files are at http://myEducationSite.somewhere.com
System.security.allowInsecureDomain("myEducationSite.somewhere.com");
See also
System.security.allowDomain(),
System.security.loadPolicyFile()
Availability
Flash Player 7 (7.0.19.0)
Usage
System.security.loadPolicyFile(url:String) : Void
442 Chapter 6: ActionScript Core Classes
System.security.allowDomain()
System.security.allowInsecureDomain()
, which is never necessary to call with a SWF file's own domain as an
System.exactSettings
to permit such access in SWF files
System.security.allowInsecureDomain()
to permit
with an argument
is