How does JavaFX handle cross-domain network requests?
Ordinarily, unsigned JavaFX Scripts may only connect back to the web server from which they originated. This restriction prevents a Script from causing denial-of-service attacks by making rapid connections to arbitrary machines on the Internet. Web servers now have facility to selectively open up their data to some clients via the use of a policy file called crossdomain.xml. The ability to check this file has been added to the JRE Version 6 Update 10 and also to JavaFX Desktop runtime (version 1.1 or above), additional information about CrossDomain XML can be found via the J2SE Plugin 6u10 Release Notes at: http://jdk6.dev.java.
