获取策略文件的Java服务器端代码import java.io.BufferedReader;
import java.io.BufferedWriter;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.OutputStreamWriter;
import java.net.ServerSocket;
import java.net.Socket;public class SecurityXMLServer implements Runnable {private ServerSocket server;
private BufferedReader reader;
private BufferedWriter writer;
private String xml;public SecurityXMLServer()
{String path = "policyfile文件路径";//此处的换成相应的读取xml文档的方式如dom或sax //xml = readFile(path, "UTF-8");/**注意此处xml文件的内容，为纯字符串，没有xml文档的版本号*/xml="<cross-domain-policy> "+"<allow-access-from domain=/"*/" to-ports=/"1025-9999/"/>"+"</cross-domain-policy> ";System.out.println("policyfile文件路径: " + path);System.out.println(xml);//启动843端口createServerSocket(843);new Thread(this).start();
}//启动服务器
private void createServerSocket(int port)
{try {server = new ServerSocket(port);System.out.println("服务监听端口：" + port);} catch (IOException e) {System.exit(1);}
}//启动服务器线程
public void run()
{while (true) {Socket client = null;try {//接收客户端的连接client = server.accept();InputStreamReader input = new InputStreamReader(client.getInputStream(), "UTF-8");reader = new BufferedReader(input);OutputStreamWriter output = new OutputStreamWriter(client.getOutputStream(), "UTF-8");writer = new BufferedWriter(output);//读取客户端发送的数据StringBuilder data = new StringBuilder();int c = 0;while ((c = reader.read()) != -1){if (c != '/0')data.append((char) c);elsebreak;}String info = data.toString();System.out.println("输入的请求: " + info);//接收到客户端的请求之后，将策略文件发送出去if(info.indexOf("<policy-file-request/>") >=0){writer.write(xml + "/0");writer.flush();System.out.println("将安全策略文件发送至: " + client.getInetAddress());}else{writer.write("请求无法识别/0");writer.flush();System.out.println("请求无法识别: "+client.getInetAddress());}client.close();} catch (Exception e) {e.printStackTrace();try {//发现异常关闭连接if (client != null) {client.close();client = null;}} catch (IOException ex) {ex.printStackTrace();} finally {//调用垃圾收集方法
          System.gc();}}}
}//测试主函数
public static void main(String[] args)
{new SecurityXMLServer();
}
}针对Socket的策略文件<cross-domain-policy>
<allow-access-from domain="*" to-ports="507" />
<allow-access-from domain="*.example.com" to-ports="507,516" />
<allow-access-from domain="*.example2.com" to-ports="516-523" />
<allow-access-from domain="www.example2.com" to-ports="507,516-523" />
<allow-access-from domain="www.example3.com" to-ports="*" />
</cross-domain-policy>

http://www.cnblogs.com/pelephone/articles/security-2048-java-socket-flash.html