If your Flex projects use a crossdomain.xml security policy file, the Adobe Developer Center has a great series of articles around the Security changes in the new Flash Player 9 Update 3 (9.0.115.0). I’m surprised I have not seen more posts in the Flex community about these changes. We have already been affected by these changes a number of times when trying to access media on Amazon’s S3 storage service due to an incorrect content-type header. All cross domain policy files must have a content type of text/* (any text type), application/xml or application/xhtml+xml. There are a number of other changes that you should be aware of, and the DevCenter article discusses them all.

You can leave a response, or trackback from your own site.