Specifications/Cross Domain Access Policies: Difference between revisions

Jump to navigation Jump to search
subdirectory, not subdomain doofus.
("to" attribute)
(subdirectory, not subdomain doofus.)
Line 69: Line 69:


=== Delegation ===
=== Delegation ===
The optional '''delegate''' attribute (default is false) on the '''allow''' element allows the policy file to redirect the client to another policy file. In other words, if an outside (but allowed) domain is trying to access a web service on a subdomain on the current domain, then the client should look for a policy file in that subdomain. If no policy file is found in the subdomain, then access is rejected and access policy processing ceases.
The optional '''delegate''' attribute (default is false) on the '''allow''' element allows the policy file to redirect the client to another policy file. In other words, if an outside (but allowed) domain is trying to access a web service on a subdirectory on the current domain, then the client should look for a policy file in that subdirectory. If no policy file is found in the subdirectory, then access is rejected and policy processing ceases.


Given this policy file at <tt><nowiki>http://www.company.com/cross-domain-policy.xml</nowiki></tt>:
Given this policy file at <tt><nowiki>http://www.company.com/cross-domain-policy.xml</nowiki></tt>:
43

edits

Navigation menu