You are not logged in.

Dear visitor, welcome to Forum. If this is your first visit here, please read the Help. It explains in detail how this page works. To use all features of this page, you should consider registering. Please use the registration form, to register here or read more information about the registration process. If you are already registered, please login here.


Thursday, September 2nd 2010, 11:55am

Amazon S3 temporary url - ERROR: Security Error


I'm getting this error for equirects hosted by amazon S3 that use their temporary url feature:

INFO: krpano 1.0.8 beta 9 (build 2010-02-21)
INFO: Flashplayer MAC 10,1,82,76 PlugIn
INFO: registered to: xyz
ERROR: Security Error -

When I try to access this url with my browser or wget it works fine. Is it possible that krpano strips some parameters from that url?



Thursday, September 2nd 2010, 4:35pm

Krpano player and images have to be from the same domain, otherwise krpano player which is a flash file cannot access images. This is a restriction set by the flash, not specific to krpano.


Thursday, September 2nd 2010, 4:39pm


I don't know whether krpano uses flash's built-in http or a raw socket. First try the allowdomain.domain in to give permission to .

If it doesn't work, raw sockets in flash will only connect to a domain different from that in which the swf is hosted if the target domain is able to provide a cross-domain policy xml file which explicitly grants the source domain permission to connect. Look into the actionscript 3 documentation to find out how to create this file, then you must be able to make it acessible from or set a different path using the crossdomainxml.url in (must be in the same domain).


Thursday, September 2nd 2010, 5:19pm

Thanks, but it works OK for other equirects hosted on S3 (non temporary url), so I don't think it is cross-domain policy related problem.


Thursday, September 2nd 2010, 5:29pm

How do you pass that URL to krpano? Is it in the xml?


Thursday, September 2nd 2010, 6:08pm

Yes, it is in xml.


Thursday, September 2nd 2010, 7:12pm

You can't directly use & as a URL separator in xml, since it's a reserved character. Whether you can work around that limitation depends on the remote server, I think. Try replacing it with %26 .


Friday, September 3rd 2010, 10:33am


you would need to have a crossdomain.xml on the amazon server,
for easiest case just put it in the servers root folder,

best regards,


Friday, September 3rd 2010, 10:51am

The problem was that I used different subdomains for protected and unprotected equirects and I didn't notice the difference. vs.

I have to put crossdomain.xml to my bucket and it works.


This post has been edited 2 times, last edit by "vlado" (Sep 3rd 2010, 11:35am)