Hello everyone,
Thanks for the report on this. We have started a discussion with the teams to provide a more permissive crossdomain.xml file to access profile images. While we don’t have any dates to provide yet, I simply wanted to mention that we heard you well and we are aware of this limitation when working with Flash.
In the meantime, a workaround is to make use of a simple proxy. This proxy will be authorized by your Flash application, either by being on the same domain or by providing a permissive crossdomain.xml file, and will fetch the images from the profile_image_url fields mentioned in the API responses and return the images so you can display them in your application rather than attempting to get them directly from Twitter.
We will keep you updated as soon as we have news to share regarding the Twitter crossdomain.xml file and when using such a proxy is no longer necessary.
Thanks for your patience.
All the best,
Romain