Security error accessing url ???

I built the BlogReader, the second "lesson" in the help where
you read Matt
Chotin's blog on Adobe's site. It works great when I tested
it locally with
Flex Builder. When I copy it to my server and then run it, it
gives a
security error.
Here's the rss url
http://weblogs.macromedia.com/mchotin/index.xml
There's a crossdomain on the root:
http://weblogs.macromedia.com/crossdomain.xml
<?xml version="1.0" ?>
<!DOCTYPE cross-domain-policy (View Source for full
doctype...)>
- <cross-domain-policy>
<allow-access-from domain="*" secure="true" />
</cross-domain-policy>
Is it because of the secure="true" ? Then why did it work on
my local
computer?

The crossdomain file should go in the folder that is pointed
to by: "
http://www.entegdt21.com:8000".
This is called the web server root.
Flex Builder installs into a trusted sandbox, which allows it
to access most any thing. When you run the app from a web server,
it must find the crossdomian file.
Tracy

Similar Messages

Flex encounters "Security error accessing url.Unable to load WSDL"

i have created a flex application which connects to SAP via web service.
when i try to run my flex application i encounter the following error.
"Security error accessing url.Unable to load WSDL"
i went through various posts relating a BSP application and crossdomain.xml
i have created the crossdomain.xml file in the application and
i tried those options and still not able to figure out the problem.
the security error is because of the absence of the crossdomain.xml file, and in which path should i be saving the file?
Kindly help me solve the problem.
Thanks in advance.

Have you seen this blog
"Crossdomain.xml" in ABAP Web AS Server cache

Security error accessing url (Unable to load WSDL)

Hi folks.
I have a Flex project that use a WCF webservice. In my localhost everything is allright, but I want to upload my flex project to a web host (http://www.dorj.ir) and upload my WCF webservice to a server that has a valid IP...
After going to http://www.dorj.ir, you can see this error
Security error accessing url
Unable to load WSDL. If currently online, please verify the URI and/or format of the WSDL (http://ip/service.svc?wsdl)
I put the crossdomain.xml file in the root of my server:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
<allow-access-from domain="http://www.dorj.ir" />
<allow-http-request-headers-from domain="http://www.dorj.ir" headers="SOAPAction"/>
</cross-domain-policy>
But I have the same error, yet...!
what should I do?!

Have you seen this blog
"Crossdomain.xml" in ABAP Web AS Server cache

Urgent requirement : security error accessing url and http error: standalone flex

Hi,
I have a requirement to create record from standalone flex. I am using Flex builder 3.
I used Flex-force toolkit to login to salesforce. The swf file generated when used internal to salesforce it works great.
But my requirement is to run it from public sites page / standalone pages. How will I configure it? I am getting error 'security error accessing url', default HTTP
The requirement is on priority, please help me to resolve this issue.
The login code is also furnished below. please help.
Full error details:
(com.salesforce.events::ApexFaultEvent)#0
bubbles = false
cancelable = true
context = (null)
currentTarget = (null)
eventPhase = 2
fault = (mx.rpc::Fault)#1
    content = (null)
    errorID = 0
    faultCode = "Channel.Security.Error"
    faultDetail = "Destination: DefaultHTTP"
    faultString = "Security error accessing url"
    message = "faultCode:Channel.Security.Error faultString:'Security error accessing url' faultDetail:'Destination: DefaultHTTP'"
    name = "Error"
    rootCause = (flash.events::SecurityErrorEvent)#2
      bubbles = false
      cancelable = false
      currentTarget = (flash.net::URLLoader)#3
        bytesLoaded = 0
        bytesTotal = 0
        data = (null)
        dataFormat = "text"
      eventPhase = 2
      target = (flash.net::URLLoader)#3
      text = "Error #2170: Security sandbox violation: file:///C|/Users/R/DOCUME%7E1/FLEXBU%7E1/TESTLO%7E1/BIN%2DRE%7E1/TESTLO%7E1.SWF cannot send HTTP headers to https://login.salesforce.com/services/Soap/u/14.0?1000.1153011256829."
      type = "securityError"
headers = (null)
message = (mx.messaging.messages::ErrorMessage)#4
    body = (null)
    clientId = "DirectHTTPChannel0"
    correlationId = "B8A1B02E-CE17-DCBA-4894-F2E4CBEB7C04"
    destination = ""
    extendedData = (null)
    faultCode = "Channel.Security.Error"
    faultDetail = "Destination: DefaultHTTP"
    faultString = "Security error accessing url"
    headers = (Object)#5
      DSStatusCode = 0
    messageId = "41F6A90D-ECAE-EA2D-7C84-F2E4DABD72F3"
    rootCause = (flash.events::SecurityErrorEvent)#2
    timestamp = 0
    timeToLive = 0
messageId = "41F6A90D-ECAE-EA2D-7C84-F2E4DABD72F3"
statusCode = 0
target = (null)
token = (mx.rpc::AsyncToken)#6
    message = (mx.messaging.messages::HTTPRequestMessage)#7
      body = "<se:Envelope xmlns:se="http://schemas.xmlsoap.org/soap/envelope/"><se:Header xmlns:sfns="urn:partner.soap.sforce.com"/><se:Body><login xmlns="urn:partner.soap.sforce.com" xmlns:ns1="sobject.partner.soap.sforce.com"><username>uname</username><password>pwdandsec token</password></login></se:Body></se:Envelope>"
      clientId = (null)
      contentType = "text/xml; charset=UTF-8"
      destination = "DefaultHTTP"
      headers = (Object)#8
        DSEndpoint = "direct_http_channel"
      httpHeaders = (Object)#9
        Accept = "text/xml"
        SOAPAction = """"
        X-Salesforce-No-500-SC = "true"
      messageId = "B8A1B02E-CE17-DCBA-4894-F2E4CBEB7C04"
      method = "POST"
      recordHeaders = false
      timestamp = 0
      timeToLive = 0
      url = "https://login.salesforce.com/services/Soap/u/14.0?1000.1153011256829"
    responders = (Array)#10
      [0] (::SalesForceResponder)#11
    result = (null)
type = "fault"
Login code:
[Bindable] public var sfdc:Connection = new Connection();
private function login():void {
Security.loadPolicyFile("http://salesforce.com/services/crossdomain.xml");
var lr:LoginRequest = new LoginRequest();
lr.username = "uname";
lr.password = "pwdtoken";
sfdc.protocol = "https";
sfdc.serverUrl = "https://login.salesforce.com/services/Soap/u/14.0";
lr.callback = new AsyncResponder(loginSuccess, loginFault);
sfdc.login(lr);

This is resolved.
I have copied the crossdomain.xml file to tomcat Root folder
and the issue is resolved.

"Security error accessing url" - Accessing HTTP service running on another machine

Flex app is hosted as web service and is trying t access data
from HTTP Service
running on different machine. It throws following error
[RPC Fault faultString="Security error accessing url"
faultCode="Channel.Security.Error" faultDetail="Destination:
DefaultHTTP"]
at
mx.rpc::AbstractInvoker/
http://www.adobe.com/2006/flex/mx/internal::faultHandler
at mx.rpc::Responder/fault()
at mx.rpc::AsyncRequest/fault()
at ::DirectHTTPMessageResponder/securityErrorHandler()
at
flash.events::EventDispatcher/flash.events:EventDispatcher::dispatchEventFunctio
n()
at flash.events::EventDispatcher/dispatchEvent()
But when I run the HTTP Services (data provider) on same
machine application
works fine.
Already used crossdomain.xml

Sorted the cross domain problem by using mx:Webservice rather
than an httpservice.

"Security error accessing url" error in Intranet Flex Development

Hi,
I have a simple Flex application with a Tree control that load data from a XML file on my intranet site using HTTPService. The Tree control pull in data without any problem if I ran the Flex app locally, however I would get "Security error accessing url" if I copied the Flex application to my intranet server and access it. The Flex SWF files and the XML file are in the same directory.
I thought there shouldn't be any cross domain security issue since both files are in the same domain/directory.
Any idea what is going on?
Thanks
xkxTnT

Thanks Guys for trying..
I figured out the problem - I initially create the project without server configuration, so the SWF runs off my local file system, I later set the server to local ColdFusion MX 7 server, the SWF still ran without problem, I then copied them to the production server and got the security error message.
Yes, I am pretty sure they are the same domain - the SWF files in in http://intranet/Flex and the url for HTTPService is http://intranet/Flex/data.xml.
I later solved the problem by creating a new project with server set to local ColdFusion server, copied the exact same code and data file, it ran find on http://localhost/Flex, and again ran without problem after deploying to the intranet server http://intranet/Flex.
I guessed Flash Builder compiled the code a little differently depending on the project configuration (server or no-server)? Not know the detail, or why does it even matter..
xkxTnT

Security error accessing url with crossdomain.xml in InDesign FlexUI

I'm evaluating Flex as a UI component in an InDesign script. Part of what it needs to do involves retrieving some data from a web server to be displayed in a datagrid. I've written a server running on localhost that will provide this data. Everything works fine when I run the component from Flash Builder or from the HTML wrapper page that is generated during the release build, but once I copy the .swf to the InDesign scripts folder and load it as part of a ScriptUI component, I get a fault response ("security error accessing url") when connecting to the server. I'm running this bit of code in from my Flex client:
var h:HTTPService = new HTTPService();
h.url = "http://localhost:8080/elements";
h.method = "GET";
h.addEventListener("result", getElementsResult);
h.addEventListener("fault", getElementsFault);
h.send();
From what I've read, I may need a crossdomain.xml file at the root of my host, so I've added that to the server and can see that it is being accessed whenever the flex component attempts to connect to the service.
My crossdomain.xml file is:
<?xml version="1.0" ?>
<!DOCTYPE cross-domain-policy SYSTEM 'http://www.adobe.com/xml/dtds/cross-domain-policy.dtd'>
<cross-domain-policy>
<allow-access-from domain="*"/>
</cross-domain-policy>
which seems to be correct, from what I understand. I've also tried quite a few other variations (setting explicit site-control policies, etc.). I'm quite new to Flex/Flash and I'm basically stuck at this point. Where might I be going wrong?

I think sleeping on this one helped... I found that if I serve the .swf from my web server then everything works out fine. Loading it from the local filesystem seems to have been the problem.

"Security error accessing url" only in Internet Explorer

I'm running Flex 4 with Flash 11.1.102.55. Here is my crossdomain.xml.
<cross-domain-policy>
<allow-access-from domain="*"/>
<allow-http-request-headers-from domain="*" headers="SOAPAction"/>
</cross-domain-policy>
Chrome and Firefox are fine loading the web services. However, all versions of IE (7, 8 and 9) return this error:
[RPC Fault faultString="Security error accessing url" faultCode="Channel.Security.Error" faultDetail="Unable to load WSDL. If currently online, please verify the URI and/or format of the WSDL (http://api.example.com/Service/Service.asmx?WSDL)"]

I just downloaded IE 10 (I was running IE9) and the error message doesn't pop up. Go figure. Though the Audio player is positioned differently in every browser.

Security error accessing ur unable to load wsdl

HI
I am using a webservice(.net webservice) that is on my
localhost and using it in flex application that is also on my
system. Means both the webservice and flex application are on the
same system.
But when i gives the reference of the webservice using the
system ip and run the application by the flex builder it generates
the error as:
mx.messaging.messages::ErrorMessage)#0
body = (Object)#1
clientId = "DirectHTTPChannel0"
correlationId = "24CD6542-F141-1A05-BA35-00A108CB30A0"
destination = ""
extendedData = (null)
faultCode = "Channel.Security.Error"
faultDetail = "Destination: DefaultHTTP"
faultString = "Security error accessing url"
headers = (Object)#2
messageId = "CC123DF0-0E6C-05FF-7894-00A109676283"
rootCause = (flash.events::SecurityErrorEvent)#3
bubbles = false
cancelable = false
currentTarget = (flash.net::URLLoader)#4
bytesLoaded = 0
bytesTotal = 0
data = (null)
dataFormat = "text"
eventPhase = 2
target = (flash.net::URLLoader)#4
text = "Error #2170: Security sandbox violation:
http://localhost:3000/MYCIMS/flex_bin/Design.swf
cannot send HTTP headers to
http://myip/MyServer/AdminWS.asmx."
type = "securityError"
timestamp = 0
timeToLive = 0
I have put crossdomain.xml file in the root of the localhost
and made every changes possible in the crossdomain.xml file but the
application is not running.
Please somebody provide an effective solution, I have spend
lots of time to resolve the problem but its not being....
Thanks in advance
Gopi Saini

Have you seen this blog
"Crossdomain.xml" in ABAP Web AS Server cache

Security Error when trying to access web service

I have an app that connects over HTTPS to a web service on
our internal network. The interface to the web service was created
by using the WSDL Import function of the Flex IDE.
I can run the app and retrieve data without a problem when I
run from the debug-bin folder that the Flex IDE compiles to.
However, I cannot connect to the web service from anywhere else,
such as a different location on my own local drives, a network
drive, or another persons machine.
I've setup a local instance of Apache with mod_ssl so I could
host the app under an HTTPS connection itself, which the
documentation seemed to imply that would work. However, when I run
the app, I get:
[FaultEvent fault=[RPC Fault faultString="Security error
accessing url" faultCode="Channel.Security.Error"
faultDetail="Destination: DefaultHTTPS"] messageId=null
type="fault" bubbles=true cancelable=true eventPhase=2]
I am accessing the app by going to
https://mymachine.companydomain.com/myapp.html, and the web service
is being accessed through https://webservice.companydomain.com/.
Anybody have any thoughts on what I should be looking at?
I've been searching and trying things for a few days with no luck.
Any help would be appreciated. Thanks.

The SSL handshake works differently to a browser as it is making the connections automatically.
The browser asks every time if you want to trust an expired certificate, and it also recommends not to. Its impractical to manually check every service call to say do you trust the certificate so the functionality doesn't exist. I doubt any integration product does this. Therefore there isn't a option to ignore the certificate if it has expired.
This makes sence as the certificate is untrustworthy. The whole idea around SSL is trusting the site you are communicating with, all parties need to be trusted. This stops hackers from replicating their site and intercepting data.
If the administrator of the remote site is not willing to renew the certificate, are they really interested in SSL. I suggest they expose a non SSL service.
cheers
James

Security Error in accessing Web service from Flex.Where to put crossdomain.xml in axis container?

Hi guys.
Typically webservices are invoked across domains. Flash has defined certain policies which prevent crossdomain access. The only way to bypass this security feature is to put a crossdomain.xml file within the server root of the webservice provider i.e. in our case at http://abc.com. A sample example of crossdomain.xml is as below:
<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
     <site-control permitted-cross-domain-policies="all" />
     <allow-access-from domain="*" secure="false"/>
     <allow-http-request-headers-from domain="*" headers="*" secure="false" />
</cross-domain-policy>
If the crossdomain.xml is not added the developer will get “Security Error accessing URL” type of messages.
The above mentioned information should be enough for you to get your flex based WebService client up and running.
We are using axis2 to build webservices. We deployed the webservices under axis2 container under repository/srvices folder . But in Flex when we try to call the webservices we were getting the exception saying security error in accessing url. The solution is we need to put the crossdomain.xml o that it is loaded at runtime and allow us to access. In tomcat if we put the file under ROOT directory we could accss the file and we were able to access the webservices deployed under Tomcat. But I googled for Axis2 container and couldnt find any solution.
Please post the reply if anyone knows the solution to it.
Thanks
Raja

Hi. So, I did take a quick look at the Axis2 standalone server and didn't see any way to server up a file such as crossdomain.xml. It seems like it might be a useful enhancement to have the ability to serve up files even if this functionality was very simple/limited and nothing like a full blown http server.
I'd log an enhancement request against axis2 if this is something you'd like to have.
http://issues.apache.org/jira/browse/AXIS2
-Alex

*Security Error Issue while accessing youtube search method.

Hello All,
I am creating a flex aplication which has youtube videos search control. it works fine on local , but when I am trying to access this from any server its getting security error "[RPC Fault faultString="Security error accessing url" faultCode="Channel.Security.Error" faultDetail="Destination: DefaultHTTP"] " while accessing the search method url using httpservice. Can any one help me.
Thanks.

You may need to add the -use-network=true compiler argument. When in Flex Builder this does not matter as much:
From Flex Builder main menubar, Project - Properties - Flex Compiler - Additional compiler arguments: -use-network=true
If this post answers your question or helps, please mark it as such.

Security Error when creating a web service with Flex

Hello comminuty.
I'm using Flex to create a standalone application and I have to use web services to retrieve data from SAP.
I used the bapi bapi_flight_getlist to create an associated WS that works fine (tested with the Eclipse's WS Explorer).
In Flex Builder, I use the following code to create my web service:
     <mx:WebService
          showBusyCursor="true"
          id="service"
          wsdl="{wsdl}"
          result="resultCreateWSHandler(event);"
          fault="faultCreateWSHandler(event);">
            <mx:operation name="FlightGetList"
                 result="resultWSHandler(event)"
                 fault="faultWSHandler(event)"></mx:operation>
        </mx:WebService>
And this is the error I'm getting:
(mx.messaging.messages::ErrorMessage)#0
body = (null)
clientId = "DirectHTTPChannel0"
correlationId = "E578ED8C-EF29-44E7-8D57-57B4DB6EB613"
destination = ""
extendedData = (null)
faultCode = "Channel.Security.Error"
faultDetail = "Destination: DefaultHTTP"
faultString = "Security error accessing url"
headers = (Object)#1
    DSStatusCode = 0
messageId = "6E7AC45E-418D-90CD-96AD-57B52DB1DAF4"
rootCause = (flash.events::SecurityErrorEvent)#2
    bubbles = false
    cancelable = false
    currentTarget = (flash.net::URLLoader)#3
      bytesLoaded = 0
      bytesTotal = 0
      data = (null)
      dataFormat = "text"
    eventPhase = 2
    target = (flash.net::URLLoader)#3
    text = "Error #2048: Violation de la sécurité Sandbox : http://localhost:8300/ztest2/bin-debug/ztest2.swf ne peut pas charger de données à partir de http://XXXX:8006/sap/bc/srt/wsdl/bndg_DEB8A28C2E19EEF19C080050568D135B/wsdl11/allinone/ws_policy/document?sap-client=800."
    type = "securityError"
timestamp = 0
timeToLive = 0
Translation: "Error #2048: Sandbox security violation: http:....swf cannot load data from http:...client=800"
Would any of you have an idea about what is causing this error??
Thanks for any help you can provide.
Regards,
C.

Hi Cristina
Did your flex application worked. i am also having same problm. cant access the BAPI from standalone flex application.
Jay

Deployment Error Channel.Security.Error

All,
I'm receiving the below error when trying to deploy my FLEX 2
page. Everything works fine when I run the page from within the
Flex Builder, but as soon as I move the files to within my Virtual
Directory and try to access the page through a web Broswer, it
fails. I'm using a Wrapper created by the Flex Builder, and even
created a crossdomain.xml file to access the WebServices. One thing
to note, the WebServices are on a different machine than what I'm
running the Flex page from.
quote:
[[RPC Fault faultString="Security error accessing url"
faultCode="Channel.Security.Error" faultDetail="Unable to load
WSDL. If currently online, please verify the URI and/or format of
the WSDL (
http://onyx/WebService1/Service1.asmx?wsdl)"
at mx.rpc.soap::WSDLParser/::dispatchFault()
at mx.rpc.soap::WSDLParser/
http://www.adobe.com/2006/flex/mx/internal::httpFaultHandler()
at
flash.events::EventDispatcher/flash.events:EventDispatcher::dispatchEventFunction()
at flash.events::EventDispatcher/dispatchEvent()
at mx.rpc::AbstractInvoker/
http://www.adobe.com/2006/flex/mx/internal::dispatchRpcEvent()
at mx.rpc::AbstractInvoker/
http://www.adobe.com/2006/flex/mx/internal::faultHandler()
at mx.rpc::Responder/fault()
at mx.rpc::AsyncRequest/fault()
at ::DirectHTTPMessageResponder/securityErrorHandler()
at
flash.events::EventDispatcher/flash.events:EventDispatcher::dispatchEventFunction()
at flash.events::EventDispatcher/dispatchEvent()
at
flash.net::URLLoader/flash.net:URLLoader::redirectEvent()]
Any thoughts on what could be causing this? I'm not using a
proxy, and I'm just trying to get a pretty basic page to work. Any
input would be appreciated.
Thanks,
-Ned kost

If the domain of the Flex2 app is different then the domain
of the WebService app you can get this error. You'll need a
crossdomain.xml file on the WebService domain's root folder giving
your Flex2 app permission to make the call.

Flex security error message

Ok, so when I pass in a user:pass with the url, it works
inside Eclipse, HOWEVER when I export my project and run it from
it's exported location (on my local box and the server), I get the
following error:
faultCode:Channel.Security.Error faultString:'Security error
accessing url' faultDetail:'Destination: DefaultHTTP'
What does this mean?

The flash player enforces a variety of security rules. Most
if not all of these
are turned off when running from eclipse. One of the rules is
you are not allowed to access a url from a different domain then
your flex application swf file was
served from.
So you flex app comes from
http://myserver:8080/MyWeb/myFlex.html
but you are trying to access
http://otherServer:9000/something.xml
So you have two choices:
Put a crossdomain.xml file in the root of otherServer or
write a proxy
for myServer that forwards your requests.
Look in the doc for the crossdomain.xml format. It's a bit
vague as to the location. They just say the ROOT of the webServer.
In tomcat that is in webapps/ROOT other web servers may be
different. To test
if your crossdomain policy file is in the correct spot you
should be able to see the file by entering
http://otherServer:9000/crossdomain.xml

Security error accessing url ???

Similar Messages

Maybe you are looking for