Skip to main content

What is cross-domain policy?

Meaning of RIA

The meaning of RIA “Register Investment Advisor”, an advisor and firm engaged with the investment advisory business or registered either with the Securities or Exchange Commission and state securities authorities’.

What is cross-domain policy?

The cross-domain policy are the files, and these files specifies the permissions of that a web client such as Adobe Flash, Java, etc. use to access information across the different domains. For Microsoft, Silverlight adopted a sub set of the Adobe's cross-domain.xml, or additionally created its own cross-domain policy file.
Whenever web client find out that resource has to be requested from another domain, it will first see for a policy file in the target of domain to determine, if performing cross domain requests, involving headers, & socket-based connections are allowed.
Master policy files are displayed at the domain's root. Client might be in-structed to loads another policy file but it will continuously checks the master policy file first to ensure that the master policy file allows the requested policy file.

To use clientaccesspolicy.xml file to allow cross-domain access
1.       Develop a service that enables access through a Silverlight client.
2.       Make a clientaccesspolicy.xml file that allows the access to the service.
3.       Saves the clientaccesspolicy.xml file to root of domain where the services are hosted.
4.       Test that the approach is enabled through invoking the services from the other domains.
                                                                                                                                                                    To use crossdomain.xml file to allow cross-domain access

1.       Make a service that enables access by a Silverlight client.
2.       Build a crossdomain.xml file that holds the following configuration. The file must be assembled to allow the access to service from any other domains, and it’s not recognized through Silverlight 4.
3.       Saves crossdomain.xml file to the root of the domain where services hosted.
4.       Test that the services is enabled through invoking the service from the other domains.

How to test:

Testing for RIA policy files:
To test RIA policy file acratia the tester should try to get the policy files “crossdomain.xml” or “clientaccesspolicy.xml” from the application's root, & from every folder found.

After retrieving each of the policy files, the permits allowed should be checked under least pre-requisite principles. Requests should only be come from the ports, domains, and protocols that are essential. Overly permissive policy should be neglected. Policies with asterisk mark"*" in them should be closely examined.

Comments

Popular posts from this blog

In Regression Testing: Difference between Automation And Manual Testing

The difference between an Automation Testing & Manual-Testing is a pillar of the Software testing, because the whole-testing is based on the Automation Testing and Manual Testing. In the project you can do both Automation Testing & Manual Testing & you can also do both Automation testing and Manual Testing simultaneously. Difference between Automation and Manual Testing Automation Testing Manual Testing The automation testing is a continuous component of the manual testing. This testing is an initiate of the testing, without of this testing we cannot start the automation testing. This takes less of time. This takes a lot of time. In the automation testing, we always test by the running the scripts. In the manual testing testers’re allowed to do the random for find the Bugs. In automation testing, it is done on the different on same time. The manual testing would be executes sequentially. ...

Want to know about Mobile Application Testing? Came to right place

What is Mobile Application Testing ? Mobile Application Testing is a phenomenon of testing functionality, usability and consistency of application software designed for mobiles. It is done in two ways: Automated and Manually. When you buy a new mobile, various applications came pre-installed and some you install as per your need from mobile software distribution platforms such as Google Play, Nokia Store etc. In the recent years, mobile devices had shown a rapid growth rate .  Factors that give an open challenge to Mobile application Testing : 1. Mobile devices models : Different models have different hardware configurations, input methods (some are QWERTY, some are touch while others are normal). 2. Several different operating systems (OS) : Market  is full of availability of different operating  systems  (   Android , IOS, BREW, BREWMP, Symbian,   Windows Phone , and   BlackBerry   (RIM)).Each operating system is unique in ...

INTRODUCTION TO SELENIUM TESTING

If you are interesting in software testing and desperately want to work in software testing profile then this post is surely for you, as we know that selenium testing is an important aspect of  software testing so you should go through this at least once. WHAT IS SELENIUM TESTING? SELENIUM is a tool for authoring tests without learning test scripting language like selenium IDE. Selenium is not just a tool but actually it is a cluster of independent tools. And selenium testing is a testing which is performed by using selenium tool. WHY WE USE SELENIUM TESTING I f we talk about the functioning and scenario of today's IT industries or companies then it is known to everyone that there is a mass movement towards automation testing. Not only this but the cluster of manual testing scenario  has also raised a great demand to make to manual testing automated by using various tools such as selenium.  There are numerous benefits which a software tester gets if he/she impleme...