SecurityError: Error #2048 when using special characters in request url

Question

Hi all,
I'm facing a really strange problem with requesting address data from a in-house developed address webservice that can be accessed using a HTTPS connection.
The problem is that I get the following error when a request has been made with special characters in the url:
SecurityError: Error #2048: Security sandbox violation: http://www.foo.com/myapp.swf cannot load data from
https://www.bar.com/myservice.svc/Aleja Legionów ul., BYTOM.
The url is encoded using encodeURIComponent. Fiddler show's a correctly encoded url:
https://www.bar.com/myservice.svc/address/Aleja%20Legion%C3%B3w%20ul.%2C%20BYTOM
The server send a normal response back.
The weird thing is that this only happens on FireFox with special characters in the url. With normal characters, it works fine.
On IE everything works fine..
crossdomain.xml of the www.foo.com:
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
<allow-http-request-headers-from domain="*" headers="*" secure="false"/>
<allow-access-from domain="*" headers="*" secure="false"/>
</cross-domain-policy>
Any help is appreciated.
Best regards,
Sjoerd Brandsma

Answer 1

You could try downloading the Oracle 8.1.7 client and the latest
Oracle8 ODBC driver, install them on your machine, and verify
that the failure goes away. That's obviously the acid test.
I can tell you that when I worked in the ODBC driver group we
did identify and fix some bugs where our parser wasn't skipping
string literals. If this particular bug wasn't fixed earlier,
it almost certainly was then (I'm guessing that work was done 12-
18 months ago).
Justin