ForumsDevelopersFlash widgets and crossdomain.xml

Flash widgets and crossdomain.xml
Author Message

Posted: Jul 11, 2008
Score: 0 Reference

one of the (really) nice things on toodledo is, of course, the open API and the interfacing to many other web services or "representations". My concern is about a possible expansion of the API that would allow for flash widgets development as well.

Recent versions of the flash player lite (e.g. for mobile devices, the WII, or, what is the main reason for my post here, the chumby) have security restrictions on accessing external data (incl. urls). This is regulated by a file crossdomain.xml that has to be located in the root path of the server, which provides the data to the widget.

So, for making a flash widget, which can access the toodledo API, such a file would also be needed to be installed in the root path of, and also allowing access from anyone. I know that there might be clear and understandable concerns about such a solution (but seems twitter, flickr, yahoo etc. do it like this)...

So, my question, is there any plan for such a flash development support, or are there any general objections against it?

(actually it should be noted that the problem can also be handled by setting up one's own proxy, but this is a rather inconvenient approach).


Toodledo Admin
Posted: Jul 11, 2008
Score: 0 Reference
We haven't really thought about it too much yet since we aren't flash developers, but if you, or anyone else, wants to build a flash application, we would be happy to work with you to find a solution that works for both of us.

Posted: Jul 12, 2008
Score: 0 Reference
Actually it does not need much to promote the development of flash applications that can access toodledo data - it is essentially the above-named file crossdomain.xml. Some examples of websites that have kind of "open" content access for flash:

Other sites are more dedicated to special domains:

There are some security issues, of course. I think they are not much higher than for the general API provided by toodledo for example - but it has to be taken into account.

So, my question is very simple: would it be it possible to provide a file

like the above, or at least with some specific entries like

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "">
<allow-access-from domain="*" />

Just to mention, I am not a professional flash developper, but making a widget to display toodledo data does not seem very hard, thanks to the convenient API.

More detailed info of Adobe about this: file=00001621.html

Toodledo Admin
Posted: Jul 14, 2008
Score: 0 Reference
We will research the "open" approach more, but in the meantime, we would be happy to make a crossdomain file with specific entries for any developer who wants to make a flash application. Just let us know and we will work with you to get it up and running.
You cannot reply yet

U Back to topic home

R Post a reply

To participate in these forums, you must be signed in.