From: Tom Hughes <tom@compton.nu>
Date: Sat, 13 Jan 2018 15:57:31 +0000 (+0000)
Subject: Allow cross domain flash access from http sites
X-Git-Tag: live~3182
X-Git-Url: https://git.openstreetmap.org/rails.git/commitdiff_plain/9590d60f731e8124173e4379608f31e2e8db8cc2?ds=sidebyside

Allow cross domain flash access from http sites
---

diff --git a/public/api/crossdomain.xml b/public/api/crossdomain.xml
index 669cae37d..5af4469de 100644
--- a/public/api/crossdomain.xml
+++ b/public/api/crossdomain.xml
@@ -2,6 +2,6 @@
 <!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
 
 <cross-domain-policy>
-	<allow-access-from domain="*"/>
+	<allow-access-from domain="*" secure="false"/>
 	<allow-http-request-headers-from domain="*" headers="*"/>
 </cross-domain-policy>
diff --git a/public/oauth/crossdomain.xml b/public/oauth/crossdomain.xml
index 669cae37d..5af4469de 100644
--- a/public/oauth/crossdomain.xml
+++ b/public/oauth/crossdomain.xml
@@ -2,6 +2,6 @@
 <!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
 
 <cross-domain-policy>
-	<allow-access-from domain="*"/>
+	<allow-access-from domain="*" secure="false"/>
 	<allow-http-request-headers-from domain="*" headers="*"/>
 </cross-domain-policy>