plume/permitted_cross_domain_policies

X-Permitted-Cross-Domain-Policies

This response header tells clients (mainly Adobe Flash Player and Adobe Acrobat) which cross-domain policy files (crossdomain.xml) are permitted on the current site. Setting the header to none prevents any policy files from being loaded, which is the most restrictive option.

See the MDN docs.

Types

An X-Permitted-Cross-Domain-Policies header value.

pub type PermittedCrossDomainPolicies {
  None
  MasterOnly
  ByContentType
  ByFtpFilename
  All
  NoneThisResponse
}

Constructors

  • None

    No policy files are allowed anywhere on the target server. Plume default.

  • MasterOnly

    Only the master policy file at /crossdomain.xml is allowed.

  • ByContentType

    Only policy files served with Content-Type: text/x-cross-domain-policy are allowed.

  • ByFtpFilename

    Only policy files whose filenames are crossdomain.xml are allowed. FTP only.

  • All

    All policy files on the target server are allowed.

  • NoneThisResponse

    No policy files are allowed, but only for the current response. Unlike None, this does not affect policies for other resources on the server.

Values

pub fn to_string(value: PermittedCrossDomainPolicies) -> String

Encode as the X-Permitted-Cross-Domain-Policies header value.

Search Document