Add crossdomain.xml on the root of SAP Web application server
Hi
in this post I would like to resume all the steps required in order to add the crossdomain.xml on the root of SAP WAS.
First of all create a crossdomain.xml, I used this content:
<?xml version=”1.0″?>
<!DOCTYPE cross-domain-policy SYSTEM “http://www.adobe.com/xml/dtds/cross-domain-policy.dtd”>
<cross-domain-policy>
<allow-access-from domain=”*” secure=”false” to-ports=”*”/>
<allow-http-request-headers-from domain=”*” headers=”*”/>
</cross-domain-policy>
If you need more information about crossdomain.xml please refers to Adobe Cross-domain policy file specification
Then create a new empty BSP application as shown below:
Import a new MIME object into the BSP application and select the crossdomain.xml that you have created:
Then launch SICF and modify the default_host and set the default service:
Open your browser and test the settings:
Hope this could help you.
Ivan
Note: This is a solution but I’m triyng to find an other way in order to have not to modify the default_host properties.
Related posts:
This entry was posted by Ivan Femia on March 9, 2009 at 1:45 PM, and is filed under Abap, Programming. Follow any responses to this post through RSS 2.0.You can leave a response or trackback from your own site.
-
-
#3 written by k 2 years ago
Hello,
I have checked service default_host using SICF, double clicked on root element default_host, double clicked sap/bc/bsp/sap/zflex – still it doesn’t work. It says:
“BSP Exception: the BSP URL /crossdomain.xml Does Not Contain Any Application Entries”rather strange for me
Thanks & Best Regards,
Gabor -
-
#6 written by Kim 2 years ago
-
-
-
#12 written by Franziska 2 years ago
Hey,
first of all thank you for your first help.But I have the followering problem that I have created a FLEX application which use extracted data from the SAP Business Suite and now if I put my application on my computer anywhere I’ve get the policy error message (attachement). This I can dissabled localy by using the Flex security setting. But that is not really a solution because it should also work anywhere without making this.
So I have insert the “crossdomain.xml” like you and made the same steps but the problem now is that I get a password request if I open my appl. on not local permitted locations. And my question is how I can avoid this because I do not can access it and after I cancel the password window (requested password from application server) it I get the same error message.Thank you.
Best regards,
FranziskaPs.:
1. Here the error message based on security policy[RPC Fault faultString="Security error accessing url" faultCode="Channel.Security.Error" faultDetail="Destination: DefaultHTTP"]
at mx.rpc::AbstractInvoker/http://www.adobe.com/2006/flex/mx/internal::faultHandler()[E:\dev\3.0.x\frameworks\projects\rpc\src\mx\rpc\AbstractInvoker.as:216]
at mx.rpc::Responder/fault()[E:\dev\3.0.x\frameworks\projects\rpc\src\mx\rpc\Responder.as:49]
at mx.rpc::AsyncRequest/fault()[E:\dev\3.0.x\frameworks\projects\rpc\src\mx\rpc\AsyncRequest.as:103]
at DirectHTTPMessageResponder/securityErrorHandler()[E:\dev\3.0.x\frameworks\projects\rpc\src\mx\messaging\channels\DirectHTTPChannel.as:368]
at flash.events::EventDispatcher/dispatchEventFunction()
at flash.events::EventDispatcher/dispatchEvent()
at flash.net::URLLoader/redirectEvent() -
-
Hi Ivan,
I have the same issue as K (post #3). I did apply OSS Note 1260386 but the issue was not solved, I got the same error message.
Before we upgraded to ERP 6.0, running WAS 6.20 (R/3 4.7), I followed the above steps and it worked fine. But with NetWeaver 7, I get the error message in post #3.
Please help.
Thank you,
Achille
-
I found this online http://www.asabau.com/2009/04/crossdomain-policy-file-in-sap-web-application-server/
It works better because you can reboot the server and it keeps working.
Upload your Crossdomain.xml to a directory on the SAP server, Open RZ10, edit your system (Extended Maintenance), add
a parameter
Parameter Name: icm/HTTP/file_access_0
Parameter Val: PREFIX=/crossdomain.xml, DOCROOT=E:\Path to your file on the SAP server\crossdomain.xml -
- Comment Feed for this Post
- InnoJam Madrid 2011: and the winner is carbonTNT
- Dropdown by key or Dropdown by index, that is the question of a WDA developer
- SAP Inside Track Milan 2011 – The reporting
- SAP Inside Track Milan 2011 – First Italian SAP Community event
- Here again abap2gapps on SAP SDN and SAP Code Exchange Home page
- OAuth2: Next generation authentication API
- It’s true, I’m an SAP Mentor
- abap2xlsx went to Chicago Inside Track 2011
- Navigation from POWL to WDA without Object Based Navigation
- abap2xlsx goes to Chicago Inside Track 2011
About Ivan Femia (1 post)
I have more than 10 yrs of experience in IT; born as Windows Basis Administrator I moved rapidly to my real passion: web programming and R&D. I have been at Techedge since 2007 and I'm head of development of Techedge Labs Team. I focused my researches in emerging technologies, mobile, WebDynpro ABAP, Flash Island, Adobe Interactive Form and ABAP. My colleagues consider me one of the top reference for ABAP, ABAP OO, WebDynpro ABAP and high tech topic. I'm owner of the SCN Community Projects on SAP Code Exchange: abap2xlsx, augmentedSAP, abap2GApps, abap2docx and Clone Hunter. Follow me on Twitter @IvanFemia


Hi Ivan!
Thank you for writing this all down, great help actually! I started implementing it, but one thing is still missing: If I follow the steps above, I can create a file with path “/sap/bc/bsp/sap/zflex/crossdomain.xml?sap-client=800″ which is not really what I want, having the file in the root with no parameters added (“/crossdomain.xml”).
So maybe if you could add this information it would make this guide much better.
Regards,
k.