Crossdomain.xml help?


all of a sudden today, our flash applications stopped loading profile images and media images. we changed no code, changed no versions of flash, and multiple versions of flash exhibit different behaviors. me and my company have had this issue a couple of times over the years. it seems whenever twitter creates new servers/subdomains they never remember their crossdomain.xml.

i can’t hit:

Flash also struggles with loading a lot of the time

please twitter, tell me if i am wrong here, but our applications are 100% broken if we can’t load profile pictures or media images.


nothing? have i missed some kind of announcement?
anyone have any insight?

thanks :slight_smile:


Thanks for pointing this out – I’m looking into it.


thank you! :slight_smile:


We expect a fix for this issue to roll out later today. I’ll let you know if it’ll take longer. Thanks again for reporting this.


Thank you for responding so quickly.

The new crossdomain on does not match those on and

The new policy on does not allow any domain other than twitter owned domains to access the images. Thus our flash applications cannot show the media images associated with tweets.


Is there anything out there that resolved this? The cross domain still only lets users access the files from Twitter properites. Shouldn’t it look like this?



Still waiting on a resolution for this. The cross-domain at has not been updated to allow access from outside of Twitter yet.


This is also affecting our projects. Please make this crossdomain.xml public so we can continue using this service without a proxy.


23 weeks 3 days ago
And still waiting…


23 weeks 3 days ago
And still waiting… [2]


24 weeks 3 days ago
And still waiting…


Is there no update on this? Is Flash not allowed to access Twitter images?


We are also having this issue. Please fix or provide a workaround!


Is anything being done to fix this issue?


A quick work around for this issue is to replace http://pbs with http://a0 for all images you need to display.


Any updates on getting the cross domain issue fixed?


Any updates on this issue?


Nice trick Xty13, but sadly your solution is working less and less as twitter is migrating their systems over to pbs and droping a0 and a1. The last couple requests I have seen put all images (avatars, and images) at pbs, and few if any worked when attempted from a0 or a1.


Not sure why this has become such a long-standing issue. Can someone at Twitter please explain why the crossdomain policy has become restrictive? People can build web apps and access the images with no problem, so why the hate for Flash developers?

Trying to use socket connection to pull user timeline tweets with application-only auth