Openfire is not properly handling the NULL bytes chars send by a XMLSocket Flash client
I cant approve that, but i see a number of complaints after upgrading to 3.6.1, that it has broken flash client support. Hasn't tried SparkWeb on my production server with 3.6.1 yet. Will do on Friday maybe.
http://www.igniterealtime.org/community/message/183044#183044 (with a suggestion to patch)
also Dele is speaking about the handling of null terminated policy-file requests here http://www.igniterealtime.org/community/docs/DOC-1553#comment-4716 (comments at the end)
Patch will need testing, but seems like a good candidate for 3.6.2.
I updated my post with a newer diff which seems to work well for me.