(No comment was entered for this change.)

(No comment was entered for this change.)

858475

(No comment was entered for this change.)

hi any idea on a workaround for flex/flash guys who have their apps in a hosted
environment, how can we get our clients working around the security issue, no issues
when running locally but it won't happen on the server. 

how do i setup the server side redirect to skip around this?

thanks

Also just a suggestion,

     As developers we are used to trolling around for information , deeply embedded
in some dusty forum is where our answers normally are. but it would make life so much
easier if we got a little communication from youtube on this, such as an "Announcement".
Something like
- Hey guys we found nasty exploit in x-dom and are cutting it off
- this will affect these areas...
- an alternative is / isnot available, is to be made available ... 

you would be surprised how many hours this will save a lot of developers.

cheers .. rant over

Mike

Hi. The easy way to get around this is to use a PHP Proxy that proxies the feed to
the Flash app, such as the one at
http://xmlrpcflash.mattism.com/xmlrpc_proxy.php?url=http://gdata.youtube.com/feeds/users/universalmusicgroup/uploads

You can figure out how it works, but if everyone uses this guy's site, he'll probally
get a bit pissed off. Make ur own site and put the proxy there as directed in
http://xmlrpcflash.mattism.com/proxy_info.php

Amazing what a Google search can find...

you can actually load the youtube player in flash, BUT its useless unless you only 
want to load one video.  once it's loaded, you have no control over the player 
controls because of the sandbox.

If youtube would just add a listener to the player that listens for parent variable 
triggers, it would solve the problem for us flash developers who want to load the 
player.

(No comment was entered for this change.)

(No comment was entered for this change.)

http://groups.google.com/group/youtube-api-gdata/browse_thread/thread/ec60f8fd5e4848c/abac545f938b7a71?lnk=gst&q=crossdomain#abac545f938b7a71

http://gdata.youtube.com/crossdomain.xml 

Hello. there is a problem in the gdata.youtube.com/crossdomain.xml file.
Is contains:
<allow-http-request-headers-from="*" />

while it should be something like:
<allow-http-request-headers-from domain="*" headers="*" secure="true"/>

Thanks