<p>This error just started popping up all over our site.</p>

<p><strong><em>Permission denied to call method to Location.toString</em></strong></p>

<p>I'm seeing google posts that suggest that this is related to flash and our crossdomain.xml.  What caused this to occur and how do you fix?</p>

[{'answer_id': 30561, 'author': 'Grey Panther', 'author_id': 1265, 'author_profile': 'https://Stackoverflow.com/users/1265', 'pm_score': 4, 'selected': True, 'text': '<p>Are you using javascript to communicate between frames/iframes which point to different domains? This is not permitted by the JS "same origin/domain" security policy. Ie, if you have</p>\n\n<pre><code>&lt;iframe name="foo" src="foo.com/script.js"&gt;\n&lt;iframe name="bar" src="bar.com/script.js"&gt;\n</code></pre>\n\n<p>And the script on bar.com tries to access <code>window["foo"].Location.toString</code>, you will get this (or similar) exceptions. Please also note that the same origin policy can also kick in if you have content from different subdomains. <a href="http://www.mozilla.org/projects/security/components/same-origin.html" rel="nofollow noreferrer">Here</a> you can find a short and to the point explanation of it with examples.</p>\n'}, {'answer_id': 30574, 'author': 'Garthmeister J.', 'author_id': 3217, 'author_profile': 'https://Stackoverflow.com/users/3217', 'pm_score': 2, 'selected': False, 'text': '<p>You may have come across <a href="http://willperone.net/Code/as3error.php" rel="nofollow noreferrer">this posting</a>, but it appears that a flash security update changed the behaviour of the crossdomain.xml, requiring you to specify a security policy to allow arbitrary headers to be sent from a remote domain. The Adobe knowledge base article (also referenced in the original post) is <a href="http://kb.adobe.com/selfservice/viewContent.do?externalId=kb403185&amp;sliceId=2" rel="nofollow noreferrer">here</a>.</p>\n'}, {'answer_id': 30672, 'author': 'Kevin Goff', 'author_id': 1940, 'author_profile': 'https://Stackoverflow.com/users/1940', 'pm_score': 0, 'selected': False, 'text': '<p>This <a href="http://willperone.net/Code/as3error.php" rel="nofollow noreferrer">post</a> suggests that there is one line that needs to be added to the crossdomain.xml file.</p>\n\n<pre><code>&lt;allow-http-request-headers-from domain="*" headers="*"/&gt;\n</code></pre>\n'}, {'answer_id': 31076, 'author': 'grapefrukt', 'author_id': 914, 'author_profile': 'https://Stackoverflow.com/users/914', 'pm_score': 0, 'selected': False, 'text': '<p>This likely causeed by a change made in the Flash Player version released in early April, I\'m not too sure about the specifics, but I assume there were security concerns with this functionality.</p>\n\n<p>What you need to do is indeed add that to your crossdomain.xml (which should be in your servers webroot)</p>\n\n<p>You can read more here: <a href="http://www.adobe.com/devnet/flashplayer/articles/flash_player9_security_update.html" rel="nofollow noreferrer">http://www.adobe.com/devnet/flashplayer/articles/flash_player9_security_update.html</a></p>\n\n<p>A typical example of a crossdomain.xml is <a href="http://twitter.com/crossdomain.xml" rel="nofollow noreferrer">twitters</a>, more info about how the file works can be found <a href="http://kb.adobe.com/selfservice/viewContent.do?externalId=tn_14213" rel="nofollow noreferrer">here.</a></p>\n'}]
['https://Stackoverflow.com/questions/30540', 'https://Stackoverflow.com', 'https://Stackoverflow.com/users/1940/']