# crossdomain xml ignored for one source, but not another

**URL:** https://community.wowza.com/t/crossdomain-xml-ignored-for-one-source-but-not-another/42893
**Category:** Wowza Streaming Engine
**Tags:** server-administration
**Created:** [October 27, 2015, 8:15am UTC](https://community.wowza.com/t/crossdomain-xml-ignored-for-one-source-but-not-another/42893 "2015-10-27T08:15:48Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Nathan\_Kadish](https://avatars.discourse-cdn.com/v4/letter/n/4af34b/32.png) [@Nathan\_Kadish](https://community.wowza.com/u/Nathan_Kadish)
#### Post date: [October 27, 2015, 8:15am UTC](https://community.wowza.com/t/crossdomain-xml-ignored-for-one-source-but-not-another/42893/1 "2015-10-27T08:15:48Z")

</div>

Cross domain policy is failing and I am not sure why. It works on this source, playable from multiple locations:

[http://ssdcougars.tv/?p=1898](http://ssdcougars.tv/?p=1898)

[http://ssdcougars.tv/?p=1754](http://ssdcougars.tv/?p=1754)

but fails

[http://ssdcougars.tv/?p=1864](http://ssdcougars.tv/?p=1864)

[http://ssdcougars.tv/?p=1859](http://ssdcougars.tv/?p=1859)

My xml is set wide open

```auto
<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
<cross-domain-policy>
	<allow-access-from domain="*" secure="false"/>
	<site-control permitted-cross-domain-policies="all"/>
	<allow-http-request-headers-from domain="*" header="*"/>
</cross-domain-policy>
	

```

**EDIT**

I found the issue, the H in http was capitalized, thus creating the error… how silly.

---

<div class="post-metadata">

### Author: ![Nathan\_Kadish](https://avatars.discourse-cdn.com/v4/letter/n/4af34b/32.png) [@Nathan\_Kadish](https://community.wowza.com/u/Nathan_Kadish)
#### Post date: [October 27, 2015, 8:29am UTC](https://community.wowza.com/t/crossdomain-xml-ignored-for-one-source-but-not-another/42893/2 "2015-10-27T08:29:46Z")

</div>

I removed

```auto
secure="false"/>
	<site-control permitted-cross-domain-policies="all"/>
	<allow-http-request-headers-from domain="*" header="*"/>

```

and now get : Cannot Load M3U8: no levels in manifest

---

<div class="post-metadata">

### Author: ![Michelle\_B](https://sea2.discourse-cdn.com/flex002/user_avatar/community.wowza.com/michelle_b/32/394_2.png) [@Michelle\_B](https://community.wowza.com/u/Michelle_B)
#### Post date: [October 29, 2015, 4:14pm UTC](https://community.wowza.com/t/crossdomain-xml-ignored-for-one-source-but-not-another/42893/3 "2015-10-29T16:14:40Z")

</div>

Hi,

To clarify, are you trying to limit your crossdomain.xml to include only specific domains? You should be able to remove

```auto
<allow-http-request-headers-from domain="*" header="*"/>

```

however, you do need

```auto
secure="false"/>
	<site-control permitted-cross-domain-policies="all"/>

```

Michelle