# Wowza crossdomain.xml

**URL:** <https://community.wowza.com/t/wowza-crossdomain-xml/94306>\
**Category:** Wowza Streaming Engine\
**Created:** [December 12, 2021, 8:46pm UTC](https://community.wowza.com/t/wowza-crossdomain-xml/94306 "2021-12-12T20:46:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![eftal\_bulut](https://avatars.discourse-cdn.com/v4/letter/e/94ad74/32.png) [@eftal\_bulut](https://community.wowza.com/u/eftal_bulut)\
**Post date:** [December 12, 2021, 8:46pm UTC](https://community.wowza.com/t/wowza-crossdomain-xml/94306/1 "2021-12-12T20:46:38Z")

</div>

Hello, I want the broadcast we made with the wowza streaming engine to work only on the site that I allow.

Can you post a sample code for crossdomain.xml?

example let [a.com](http://a.com) work only

Thanks.

---

<div class="post-metadata">

**Author:** ![Connessione](https://avatars.discourse-cdn.com/v4/letter/c/43a26b/32.png) [@Connessione](https://community.wowza.com/u/Connessione)\
**Post date:** [December 12, 2021, 11:42pm UTC](https://community.wowza.com/t/wowza-crossdomain-xml/94306/2 "2021-12-12T23:42:57Z")

</div>

I believe what you are looking for is a domain lock mechanism so that stream can be played/published only for specific domain(s). Would that be correct?

From the earlier days there were, out of the box modules for this - hotline denial (flash) and [referrer validate](https://www.wowza.com/docs/how-to-control-access-to-your-application-by-checking-referer-domain-modulereferervalidate). Not sure if the modules work properly for the latest version of WSE though.

You can also start at server side with your own custom module to implement a custom solution. If you are interested, take a look at the first few examples listed [here](https://www.wowza.com/docs/basic-java-code-examples-for-wowza-media-server).