How to change the Flash Media Server default crossdomain.xml

Last updated on 27 Des 2022

Issue

Adobe Flash Media Server (FMS) returns the following by default for crossdomain.xml requests:

<cross-domain-policy>
  
 <allow-access-from domain="*">
  
 <site-control permitted-cross-domain-policies="master-only">
  
 <?xml version="1.0" encoding="utf-8" ?> 
  
 <cross-domain-policy>
  
   <allow-access-from domain="*" /> 
  
 <site-control permitted-cross-domain-policies="master-only" /> 
  
 </cross-domain-policy>

Some administrators may want to change this default behavior and use a custom crossdomain.xml policy file.

Reason

FMS typically does not require a crossdomain.xml policy file. However, when Adobe Flash Player makes some HTTP requests (non-RTMPT) to FMS (e.g. /fcs/ident, /fcs/uInfo, etc.), it will request a crossdomain.xml. For this reason, FMS has a default, built-in crossdomain.xml. This crossdomain.xml can be overridden.

Solution

Override the default by specifying the absolute path to a separate crossdomain.xml in Server.xml:

Stop FMS.
Back up fms_root/conf/Server.xml, then open the file in a text editor.
Specify the absolute path to the crossdomain.xml in the <CrossDomainPath> tag. For example:

<Root><Server><CrossDomainPath>C:\Program Files\Adobe\Flash Media Server 3\conf\crossdomain.xml</CrossDomainPath>
Save the Server.xml file and start FMS.