14 messages in com.googlegroups.google-picasa-data-apiRe: content type of http://photos.goo...
FromSent OnAttachments
Ivo20 Mar 2008 11:22 
Sven20 Mar 2008 11:31 
Ivo20 Mar 2008 13:39 
Dee Volume26 Mar 2008 05:05 
Jeff Fisher (Google)26 Mar 2008 09:29 
Dee Volume26 Mar 2008 10:30 
Jeff Fisher (Google)31 Mar 2008 17:17 
Michal Gron31 Mar 2008 23:57 
Dee Volume01 Apr 2008 01:04 
Michal Gron01 Apr 2008 01:11 
Dee Volume01 Apr 2008 01:32 
Dee Volume03 Apr 2008 06:41 
Dee Volume03 Apr 2008 06:42 
Jeff Fisher (Google)03 Apr 2008 11:07 
Subject:Re: content type of http://photos.googleapis.com/crossdomain.xml
From:Dee Volume (volu@googlemail.com)
Date:03/26/2008 05:05:30 AM
List:com.googlegroups.google-picasa-data-api

I've got problems with this - I was happily building my picasa-powered "portfolio" site - running nicely locally, hadnt even thought about crossdomain stuff - uploaded to
http://www.flohmedia.com/--testing/floh/portflohlio.html (not a typo :) ) and xml wouldnt load.

I went back and implemented in the AS3, Security.loadPolicyFile("http://photos.googleapis.com/data/ crossdomain.xml"); No joy, still got security sandbox violation errors popping up in the flash 9 debug player.

Thought about it, my tiny brain tried to fathom how loading a cross domain policy file from a googleapis.com subdomain was pertinent to my then requesting xml from http://picasaweb.google.com/ - surely it isnt?

So potluck, tried changing the feed http://photos.googleapis.com/data/feed/api/user/flohmedia?kind=album

Which worked - identical atomfeed to picasaweb.com/google.com/data/ feed etc

BUT, the individual images in picasa are coming from a google.com subdomain and they wont load... and obviously the crossdomain policy file is not from google.com I got this error in the debug player Loader.content: http://www.flohmedia.com/--testing/floh/portflohlio.swf cannot access
http://lh4.google.com/flohmedia/R-jl62g1n6E/AAAAAAAAAMk/cda9YgpfjCs/s160-c/SkypeWebstore02.jpg. A policy file is required, but the checkPolicyFile flag was not set when this media was loaded.

So, I went back and true enough I hadnt used a LoaderContext object, with checkPolicyFile set to true, so I did this, and came to my current brickwall, Loader.content: http://www.flohmedia.com/--testing/floh/portflohlio.swf cannot access
http://lh4.google.com/flohmedia/R-jl62g1n6E/AAAAAAAAAMk/cda9YgpfjCs/s160-c/SkypeWebstore02.jpg. No policy files granted access.

"No policy files granted access" ....

Now what? A PHP Proxy to grab all the images from google.com and serve them to my flash file from its own server seems crazy. Surely this is surmountable. What am I missing???

Gutted. Till this point everything was going super smoothly

On Mar 20, 8:39 pm, Ivo <iple@gmail.com> wrote:

Yep, this is what I needed.

Thanks!

- Ivo

On Mar 20, 11:31 am, Sven <s.@google.com> wrote:

Hi Ivo,

To access the Picasa Data API via flash, you want to use
thehttp://photos.googleapis.com/data/crossdomain.xmlfile. That file has the correct permissions and the correct content type.

Let me know if that solves your problem!

-Sven

2008/3/20 Ivo <iple@gmail.com>:

Hello,

Seems the filehttp://photos.googleapis.com/crossdomain.xmlisserved with the content-type text/xml but it has a meta-policy of <site- control permitted-cross-domain-policies="by-content-type" /> .

According to this https://store2.adobe.com/devnet/flashplayer/articles/secure_swf_apps_... the crossdomain.xml needs to be served with content-type text/ [x-]cross-domain-policy .

I read on an earlier thread that the correct content type was once used. Can it be changed back?

Thanks,

- Ivo

<snip> ivo:~ ivopletikosic$ curl -vhttp://photos.googleapis.com/crossdomain.xml ... < HTTP/1.1 200 OK < Content-Type: text/xml < Last-Modified: Tue, 04 Mar 2008 21:38:05 GMT