About allowing HTTP to HTTPS protocol access between SWF files

As discussed in the previous section (see About allowing data access between cross-domain SWF files), you must use an allowDomain handler or method to permit a SWF file in one domain to be accessed by a SWF file in another domain. However, if the SWF being accessed is hosted at a site that uses a secure protocol (HTTPS), the allowDomain handler or method doesn't permit access from a SWF file hosted at a site that uses an insecure protocol. To permit such access, you must use the LocalConnection.allowInsecure Domain() or System.security.allowInsecureDomain() statements.

For example, if the SWF file at https://www.someSite.com/data.swf must allow access by a SWF file at http://www.someSite.com, the following code added to data.swf allows such access:

// Within data.swf
System.security.allowInsecureDomain("www.someSite.com");
my_lc.allowInsecureDomain = function(sendingDomain) {  
  return(sendingDomain=="www.someSite.com");
}