http://www.flash-remoting.com/notablog/home.cfm?newsid=43 "Flash Player 7 security and Flash Remoting" -- If you are using Flash Remoting, or any other form of data loading (LoadVars, web services, or XML) you should set up a cross-domain.xml file at the root of your server. This should include any domains that might access resources on your server. This should also include any SUB-domain. With example

Flash 6 and XML

http://www.moock.org/asdg/technotes/crossDomainLoad/ "Loading XML across domains" -- In Flash MX, a movie at one domain cannot load XML or variables from another domain. This limitation is part of the Flash Player "security sandbox" that generally limits a movie's access to content hosted at another domain. The sandbox restrictions (and ways to work around them) are described in Macromedia's technote 16520. In this article, we'll focus on one specific workaround to one specific restriction.

Flash 7 and XML

http://www.moock.org/asdg/technotes/crossDomainPolicyFiles/ "Cross domain policy files" -- In Flash Player 7, data can only be accessed via the exact same domain from which the movie was loaded. For example, Flash Player 6 will allow a movie posted on games.moock.org to load an XML file from news.moock.org. But in Flash Player 7, that load attempt would fail.

---

Related: Security, Flash limitations