Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Do I need a crossdomain.xml file for my MVC2 site?

I am getting the following error in my MVC2 site: The controller for path '/crossdomain.xml' was not found or does not implement IController.

From some research it appears that the file is related to antiforgery and cross site scripting (XSS) attacks. Do I need a crossdomain.xml file for my MVC2 site?

like image 361
Tarzan Avatar asked Mar 14 '11 15:03

Tarzan


People also ask

What is Crossdomain xml and why do I need it?

The crossdomain. xml file is a cross-domain policy file. It grants the Flash Player permission to talk to servers other than the one it is hosted on and is required for Flash to use Speedtest servers. Note there are two sources of crossdomain information for a Speedtest Server.

Can I delete Crossdomain xml?

The crossdomain. xml file is only used by SWF files that leverage Adobe Flash External Interface API. If this API is not being tracked then the crossdomain. xml file can safely be removed from the On Premises SDC (SmartSource Data Collector) document root.

What is Crossdomain xml file?

A cross-domain policy file is an XML document that grants a web client, such as Adobe Flash Player or Adobe Acrobat permission to handle data across domains.

What is ClientAccessPolicy xml?

The ClientAccessPolicy. xml file allows other Silverlight client services to make HTTP requests to your web server and see its response. This might be used for accessing one time tokens and CSRF nonces to bypass CSRF restrictions. Remediation. Configure your ClientAccessPolicy.


1 Answers

Do I need a crossdomain.xml file for my MVC2 site?

Only if you want it to be accessible cross domain from client Flash scripts. Also to avoid this error you could exclude it from your routes:

routes.IgnoreRoute("crossdomain.xml");
like image 66
Darin Dimitrov Avatar answered Oct 06 '22 21:10

Darin Dimitrov