title: Security sandbox violation cannot load data from box.net
body: <p>I have an application which upload/download files to/from box.net. the application works fine when not deployed on server but when I deploy it on Google App Engine the following error is encountered.</p>
  
  <blockquote>
    <p>Error #2044: Unhandled securityError:. text=Error #2048: Security
    sandbox violation: <a href="http://somexyz.appspot.com/xyzsample.swf" rel="nofollow noreferrer">http://somexyz.appspot.com/xyzsample.swf</a> cannot
    load data from <a href="http://box.net/api/1.0/download/abcdef/123456" rel="nofollow noreferrer">http://box.net/api/1.0/download/abcdef/123456</a>.</p>
  </blockquote>
  
  <p>I have included the below lines of code in as3</p>
  
  <pre><code>Security.allowDomain("*");
  </code></pre>
  
  <p>and placed crossdomain.xml in app root folder (Google App Engine) and can access the file using <strong>somexyz.appspot.com/crossdomain.xml</strong></p>
  
  <p>crossdomain.xml contains the below lines</p>
  
  <pre><code>&lt;?xml version="1.0"?&gt; 
  
  &lt;!DOCTYPE cross-domain-policy SYSTEM "/xml/dtds/cross-domain-policy.dtd"&gt; 
  
  &lt;cross-domain-policy&gt;
  
     &lt;site-control permitted-cross-domain-policies="all"/&gt;
  
     &lt;allow-access-from domain="*" to-ports="*"/&gt;
  
     &lt;allow-http-request-headers-from domain="*" headers="*"/&gt;
  
     &lt;allow-http-request-headers-from domain="*"/&gt;
  
  &lt;/cross-domain-policy&gt;
  </code></pre>
  
  <p>I am also getting the same issue when I tried using tomcat.</p>