Sie sind nicht angemeldet.

Lieber Besucher, herzlich willkommen bei: krpano.com Forum. Falls dies Ihr erster Besuch auf dieser Seite ist, lesen Sie sich bitte die Hilfe durch. Dort wird Ihnen die Bedienung dieser Seite näher erläutert. Darüber hinaus sollten Sie sich registrieren, um alle Funktionen dieser Seite nutzen zu können. Benutzen Sie das Registrierungsformular, um sich zu registrieren oder informieren Sie sich ausführlich über den Registrierungsvorgang. Falls Sie sich bereits zu einem früheren Zeitpunkt registriert haben, können Sie sich hier anmelden.

1

Donnerstag, 29. April 2010, 12:20

Security Error

Hi,
I'm attempting to host my pano images on a content delivery network, specifically Rackspace Cloudfiles, which is on a different domain to where krpano is hosted. I get this error in krpano player for each of the images:

ERROR: Security Error - "http://cxxxxx.cdn.cloudfiles.rackspacecloud.com/filename.jpg"

My XML looks like this:

Quellcode

1
2
3
4
5
<image type="CUBE" multires="true" tilesize="579">
		<level tiledimagewidth="3183" tiledimageheight="3183">
			<left  url="http://cxxxxx.cdn.cloudfiles.rackspacecloud.com/l3_l_%0v_%0h.jpg" />
			<front url="http://cxxxxx.cdn.cloudfiles.rackspacecloud.com/l3_f_%0v_%0h.jpg" />
			etc.


I thought it may be a cross-domain problem so I added this to my XML:

Quellcode

1
2
3
<security>
	<allowdomain domain="*" />
</security>


That didn't fix the problem, so I tried this:

Quellcode

1
2
3
<security>
	<crossdomainxml url="http://www.mysite.com/crossdomain.xml" />
</security>


...with this in the crossdomain.xml file:

Quellcode

1
2
3
4
<?xml version="1.0"?>
<cross-domain-policy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://www.adobe.com/xml/schemas/PolicyFile.xsd">
  <allow-access-from domain="*"/>
</cross-domain-policy>


...no joy.

I'm confused about where the crossdomain.xml is supposed to go. Some threads in the forum say "on the other server" some say "root of your server". I've tried both, but the problem persists.

Has anyone attempted a similar thing with a CDN, perhaps Amazon S3 or similar?

Any suggestions much appreciated.

Thanks,
Andrew

2

Donnerstag, 29. April 2010, 12:38

Hi,

this crossdomain.xml must be on the same server as the external images,
is this the case?

best regards,
Klaus

3

Freitag, 30. April 2010, 04:13

Hi Klaus,
yes, crossdomain.xml resides in the same CDN container as the image files. I found this article by RackSpace http://cloudfiles.rackspacecloud.com/ind…_Flash_Examples and have used the same crossdomain.xml file they suggest, but I still get the security errors.

crossdomain.xml

Quellcode

1
2
3
4
5
6
7
<?xml version="1.0"?>
 <!DOCTYPE cross-domain-policy SYSTEM"http://www.adobe.com/xml/dtds/cross-domain-policy.dtd"> 
  <cross-domain-policy>
   <site-control permitted-cross-domain-policies="master-only"/>
   <allow-access-from domain="*"/>
   <allow-http-request-headers-from domain="*" headers="SOAPAction"/>
  </cross-domain-policy>

4

Freitag, 30. April 2010, 17:36

It looks like it may be a problem on the krpano player / XML side.

I have a krpano plugin that launches videos from a menu. It uses its own XML config file to get the URLs of the videos. I have now set the URLs of the videos to their respective locations in a container on the CDN and they all load perfectly.

5

Donnerstag, 6. Mai 2010, 07:51

I found the problem. The cross-domain policy file uploaded as application/octet-stream to the CDN container, a symptom of Rackspace's browser-based upload utility I'm guessing. I deleted the policy file and uploaded another through FireUploader so it now has the correct mime type of text/xml. All works perfectly.

I'm still baffled as to why the policy file I used in the video container that has an app/octet-stream mime type works for the videos loaded by the plugin *confused*

6

Samstag, 10. August 2013, 08:19

I had the same question when I use S3 as the cloud resource container

I had the same question when krpano loading the xml (loading error[Security Error]).use S3 as the cloud resource container.
Anybody when knows the true reason.