crossdomain.xml files back on twitter.com and search.twitter.com

[Raffi Krikorian]

hi all.

the crossdomain.xml files are back on twitter.com and
search.twitter.com -- sorry for the accidental removal. feel free to
reach out if you have any issues.

thanks!

--
Raffi Krikorian
Twitter Platform Team
ra...@twitter.com | @raffi

[Marauderz]

Now I'm seeing that the crossdomain.xml files are limiting access only
to Twitter domains. What's up guys?

[Marauderz]

The crossdomain.xml file is now denying access by external domains,
what's up?

On Nov 5, 7:40 am, Raffi Krikorian <ra...@twitter.com> wrote:

[Blue Monkeys]

They are back alright, but there is a new issue: crossdomain.xml is
now restricted and doesn't allow for remote access :(

We use the search API in atom format for getting data for a flash site
- it doesn't work anymore...
http://www.lampenduell.at/#/facts-and-figures

Is there any simple way around the restrictions or will you "fix" the
crossdomain.xml?

Any info is highly appreciated...
Best regards,
Gerald

[Lykle]

Hi All,

Although the crossdomain.xml files are back, they have not restored
the previous situation. We get reports that Twitterfountains fail all
over the place, corroborating the messages below from Marauderz and
Blue Monkeys.

Lykle
www.twitterfountain.com

[SmartyP]

I too would like to know if the new restrictions are intentional..
should we plan on not being allowed search.twitter.com access, or is
this a mistake?

[guytom]

Any update on why the change in the search crossdomain? is it
permanent? you should at least give developers time to prepare

[Raffi Krikorian]

hi all.  

we've put the following crossdomain.xml onto search.twitter.com

<?xml version="1.0"?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
       <allow-access-from domain="*" />
</cross-domain-policy>

hopefully this fixes most people's apps!  we're aiming to stay with this policy on search.

Any update on why the change in the search crossdomain? is it
permanent? you should at least give developers time to prepare

hi all.

the crossdomain.xml files are back on twitter.com and  

search.twitter.com -- sorry for the accidental removal.  feel free to  

reach out if you have any issues.

thanks!

[orian]

Any update on when a similar policy will be put into place on
api.twitter.com? This was promised a year and a half ago. A lot of
folks are asking for it, as can be seen in this thread:
http://groups.google.com/group/twitter-development-talk/browse_frm/thread/e35a708400b529b3

[Raffi Krikorian]

hi!

we're definitely discussing it heavily internally now that
api.twitter.com has been launched and we are attempting to migrate all
developers to use that endpoint instead of the twitter.com endpoints.
we'll definitely keep people updated as we think these through. of
course, we always welcome discussion -- so please feel free to chime
in with ideas, concerns, etc.

> Any update on when a similar policy will be put into place on
> api.twitter.com? This was promised a year and a half ago. A lot of
> folks are asking for it, as can be seen in this thread:
> http://groups.google.com/group/twitter-development-talk/browse_frm/thread/e35a708400b529b3
>

[orian]

Very glad to hear that! I'm going to reach out to my fellow Flashers
again to see who can give solid advice on opening up the crossdomain
policy while maintaining security.

On Nov 8, 6:55 pm, Raffi Krikorian <ra...@twitter.com> wrote:
> hi!
>
> we're definitely discussing it heavily internally now that  
> api.twitter.com has been launched and we are attempting to migrate all  
> developers to use that endpoint instead of the twitter.com endpoints.  
> we'll definitely keep people updated as we think these through.  of  
> course, we always welcome discussion -- so please feel free to chime  
> in with ideas, concerns, etc.
>
>
>
> > Any update on when a similar policy will be put into place on
> > api.twitter.com? This was promised a year and a half ago. A lot of
> > folks are asking for it, as can be seen in this thread:

> >http://groups.google.com/group/twitter-development-talk/browse_frm/th...

[Raffi Krikorian]

that sounds great -- please feel free to continue this discussion on
this list, or just reach out to me personally.

>
> Very glad to hear that! I'm going to reach out to my fellow Flashers
> again to see who can give solid advice on opening up the crossdomain
> policy while maintaining security.
>