The issue turned out to be that while server A is an http(non-SSL) server, server B is https.
When we deployed the app on an https site the error disappeared.

Yeah, unfortunately this theme is a little old and doesn’t support code in comments. Guess I need to get off my ass and upgrade my side

You can go ahead and email it to me, but I realized something looking at your comment: You do not add the content type to the crossdomain file itself. Instead, this is a setting that is configured on the server level. In essence, you need to set a MIME type for the crossdomain file. Here’s a good article on configuring MIME types from Mozilla: https://developer.mozilla.org/en/properly_configuring_server_mime_types

Hey there! It sounds like there are a couple points which you’re confused on here. First, I’m not sure what java commands you’re talking about — if you’re talking about the instructions on Adobe’s site to set up a policy file log, then you’re really only editing text files (so you shouldn’t be entering anything into a browser). Maybe if you tell me exactly what step you’re having trouble with, I can help more.

However, that may be moot, since if I look at the error you posted, it looks like you’re trying to load data from the domain “innogames.net” into a SWF that’s running on the domain “the-west.net”. If that’s the case, then the crossdomain policy file needs to be on the server innogames.net, not on your computer. You’ll have to contact whoever controls that domain and make sure they put the crossdomain policy file up there.

The error looks as follows:
Flash reported an error: “Security error: Error #2048: Security sandbox violation: http://en7.the-west.net/flash/battle/fortbattle.swf?1259785987930 cannot load data from en7w1.tw.innogames.net:1582.

I can’t find the location of the crossdomain file on my computer and I also don’t understand where should I run the java commands which is written in this page. when I write this commands in the browser, it turn to google.

loadPolicyFile(”http://”+host+”:”+port+”/crossdomain.php”) where that php file returns the actual crossdomain with modified content-type as follows:
header(‘Content-Type: application/xml’);
readfile(‘crossdomain.xml’);