GeoRSS Error. Channel. Security.Error

[ChristinaMcCullough]

I am receiving a Fault Code: Channel.Security.Error when I am calling up my GeoRSS Widget.  The Widget works correctly with Flex Builder 3.  However, when I am accessing the widget through the wwwroot folder I receive this error.  I am hostin this through an https server.

Error:  Event Target: [Object HTTPService]
Event Type: fault
Fault Code: Channel.Security.Error
Fault Info:  Security error accessing url

[DasaPaddock]

Can you post more details about the URLs involved? Are you making cross-domain requests? Are you loading the app over http, but then making https requests? etc.

You can also use a tool like HttpFox to see if any requests for /crossdomain.xml are failing.

[KeithBornhorst]

It looks like the GeoRSS widget fails when a crossdomain.xml file does not exist (404 - Not Found error).

If an RSS feed is available for consumption, yet the site owner neglects to create a cross domain file, should the RSS request fail? Shouldn't a crossdomain 404 equate to allow-access-from domain="*" ?

My recent specific example: National Data Buoy Center RSS Feed

[DasaPaddock]

No, the Flash Player requires a crossdomain.xml to exist and if it doesn't, it won't allow access to the resource from another domain. You can workaround this by going through a proxy that you have in the same domain as the app or on another domain that does have a crossdomain.xml file that allows access from your app's domain.

[KeithBornhorst]

Thanks for the response and the explanation, Dasa.

[AndyGup]

Here's a blog post with some additional information for anyone having issues with cross-domain, channel security, or security sandbox violation problems:

http://blogs.esri.com/Dev/blogs/arcobjectsdevelopment/archive/2009/09/28/ArcGIS-RIA-Developers_3A00_...