Coaching for people managers

I had a cross domain issue and after browsing for a while i came across flXHR which seemed to be promising solution and hence i went ahead with it. It's a flash based cross domain solution which is based on a crossdomain.xml config file (which lists the list of sites from where you can access the services). For more details on flXHR click here. I thought I have the great solution in hand and work with it before I encountered thee major of limitation of flXHR:  The location of crossdomain.xml can be specified in configuration of flproxy via loadPolicyURL attribute. Which is supposedly the path flXHR will take to resolve the permission of your domain to access service hosted at that domain. However this is where the problem comes it will not only consider the crossdomain.xml at given location but it will also make a query at the root of the site and hunt gain for crossdomain.xml to see the permission for the client domain to access the service e.g. if you specify loadPolicyURL=ww...

I am using the cross domain flXHR solution with jQuery well initially it was a headache to implement but once done it was on auto pilot seems liked a gem until recently when i got the blocker of IE7 crash on windows XP. The problem seems to be caused by swfobject.js and putting it before jquery declaration will solve the problem:             <script type="text/javascript" src="/flXHR/swfobject.js"/>             <script type="text/javascript" src="/flXHR/flXHR.js"/>

Error: 15 Type: securityError Description: A security sandbox error occured with the flXHR request. Source Object Id: [your object id] I am trying to deploy my application on Tomcat and was continuously facing the issue. The solution to this problem is placing your crossdomain.xml in /webapps/ROOT. Just for reference attaching the sample crossdomain.xml on which I was working trying to workout my PoC:   <?xml version="1.0"?> <!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd"> <cross-domain-policy> <site-control permitted-cross-domain-policies="master-only"/> <allow-access-from domain="*" secure="false"/> <allow-http-request-headers-from domain="*" headers="*" secure="false"/> </cross-domain-policy> Hope this will help.