title: Flash crossdomain.xml in a non-root directory
body: <p>I have a web service running in <a href="http://server/abc/service" rel="nofollow noreferrer">http://server/abc/service</a> which is being accessed by Flash from a different domain. I deployed a cross domain policy file to <a href="http://server/abc/crossdomain.xml" rel="nofollow noreferrer">http://server/abc/crossdomain.xml</a> and made the Flash load it using:</p>
  
  <pre><code> flash.system.Security.loadPolicyFile("http://server/abc/crossdomain.xml");
  </code></pre>
  
  <p>in the constructor of the main movie clip. However, when the Flash starts, it requests and loads this file (observed in Firebug), but then it also requests it from the root of the server (i.e. from <a href="http://server/crossdomain.xml" rel="nofollow noreferrer">http://server/crossdomain.xml</a>) which does not exist. Subsequent HTTP requests don't work reporting security cross domain errors. When I put the policy file to the root of the server, it all works.</p>
  
  <p>Why does it request the policy file from the root as well even thought it loads it from the subdirectory? Why the subdirectory policy file is not enough?</p>
  
  <p>I should also note that the two policy files are loaded before any application HTTP requests are issued.</p>